360 Secure SkillHub
360 安全技能中心

Auto Bounty Hunter

核心功能:自动扫描GitHub零评论开放议题,按配置评估价值与复杂度,自动认领符合要求的议题、提交优质PR,并追踪PR合并状态。典型场景:适合希望通过开源贡献赚取被动收入、无需手动筛选议题的用户。可自定义收益门槛、复杂度上限等,支持一键启动或定时自动运行,全程自动化操作。

dagangtj
dagangtj
热度 54.81
最近更新 2026-05-18 11:52:03
分类:开发依赖:代码执行 / 第三方 API / 读写文件应用场景:代码生成 / API 集成 / 自动化脚本 / 任务管理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add auto-bounty-hunter
Metadata
name
github-bounty-hunter
description
Automatically scan GitHub repositories for open issues with 0 comments, evaluate their value, claim them, and submit PRs. Automates the entire GitHub bounty hunting workflow for passive income generation. Use when the user wants to find and complete GitHub issues for money, automate bounty hunting, or set up passive income from open source contributions.

GitHub Bounty Hunter

Automate the entire GitHub bounty hunting workflow: scan for opportunities, evaluate value, claim issues, and submit PRs.

What This Skill Does

  1. Scans GitHub for 0-comment issues (first-mover advantage)
  2. Evaluates issue value and complexity
  3. Claims viable issues automatically
  4. Submits PRs with quality implementations
  5. Tracks submissions and monitors merge status

Usage

Quick Start

# Scan and process issues automatically
bash scripts/bounty_hunter.sh

Configuration

Edit scripts/config.sh to customize:

MIN_VALUE=10           # Minimum estimated value ($)
MAX_COMPLEXITY=5       # Max complexity (1-10 scale)
AUTO_CLAIM=true        # Auto-claim issues
AUTO_SUBMIT=true       # Auto-submit PRs

Automated Operation

Set up cron for continuous scanning:

# Every 30 minutes
*/30 * * * * bash ~/.openclaw/workspace/skills/github-bounty-hunter/scripts/bounty_hunter.sh

How It Works

  1. Discovery: Searches GitHub for is:issue is:open comments:0
  2. Filtering: Removes spam, duplicates, and low-value issues
  3. Evaluation: Scores based on:
    • Repository stars/activity
    • Issue clarity and scope
    • Estimated time to complete
    • Potential payout
  4. Claiming: Comments on issue to claim it
  5. Implementation: Generates solution and submits PR
  6. Tracking: Monitors PR status and merge events

Scripts

  • bounty_hunter.sh - Main automation script
  • config.sh - Configuration settings
  • evaluator.sh - Issue value evaluation
  • tracker.sh - PR status tracking

Best Practices

  • Start with AUTO_CLAIM=false to review opportunities first
  • Focus on repositories with clear contribution guidelines
  • Maintain high PR quality to build reputation
  • Track merge rate and adjust strategy

Revenue Potential

  • Conservative: $50-200/month (5-10 merged PRs)
  • Moderate: $200-500/month (10-25 merged PRs)
  • Aggressive: $500-1000/month (25-50 merged PRs)

Success depends on:

  • PR quality and merge rate
  • Time invested
  • Repository selection
  • Market conditions