360 Secure SkillHub
360 安全技能中心

GitHub Bounty Hunter

该 Skill 通过 GitHub 搜索标签和关键词发现 bounty 机会,按评论、PR、认领数和发布时间评估竞争,并用已知模式过滤农场与骗局仓库;同时检查 paid 标签和支付确认。输出结构化机会列表、竞争评分、支付验证与过滤统计。无法验证离链支付、私有仓库及无浏览器条件下的代币支付。

xiaomomini
xiaomomini
热度 16.00
最近更新 2026-05-23 17:25:08
分类:搜索依赖:第三方 API应用场景:研究 / 推荐

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add xiaomo-bounty-hunter
Metadata
name
github-bounty-hunter
description
Find legitimate GitHub bounties by filtering out farm/scam repositories, tracking competition, and monitoring payment history. Use when you need to discover real bounty opportunities on GitHub.
metadata
{"openclaw":{"version":"1.0.0","author":"xiaomomini","tags":["github","bounty","automation","opportunity-discovery"]}}

GitHub Bounty Hunter

A skill for finding legitimate GitHub bounty opportunities by filtering out farm/scam repositories and tracking competition.

What This Skill Does

  1. Scans GitHub for bounty opportunities using multiple search strategies
  2. Filters out farms/scams using known patterns (AgentOrchestration, RustChain, etc.)
  3. Tracks competition by counting comments, PRs, and claims
  4. Monitors payment history by checking for "paid" labels and tx hashes
  5. Reports viable opportunities with clear scoring

Usage

Basic Scan

Ask your agent to scan for bounties:

Scan GitHub for legitimate bounty opportunities

Filtered Scan

Specify your criteria:

Find JavaScript bounties under $200 with less than 5 comments

Competition Check

Check a specific bounty:

Check competition for https://github.com/owner/repo/issues/123

Payment History

Check if a project pays:

Check payment history for owner/repo

How It Works

Farm/Scam Detection

The skill maintains a list of known farm/scam patterns:

  • AgentOrchestration: 2310+ issues, only bot contributor, requires star
  • RustChain: Token has no market value, closed without merge
  • Generic farms: High issue count, low contributor count, unclear payment

Competition Scoring

Bounties are scored based on:

Factor Weight Low Competition High Competition
Comments 40% <5 >10
PRs 30% <3 >5
Claims 20% <2 >5
Age 10% <7 days >30 days

Payment Verification

Checks for:

  • "paid" label on issue
  • Comments with tx hash or payment confirmation
  • Maintainer response confirming payment
  • Historical payment patterns

Search Strategies

1. Label-Based Search

label:bounty language:JavaScript created:>2026-05-15
label:"good first issue" language:Python created:>2026-05-15
label:sponsored language:TypeScript created:>2026-05-15

2. Platform-Specific Search

org:algora-io is:issue is:open
org:opire is:issue is:open

3. Keyword Search

"bounty" OR "reward" OR "payment" in:readme language:JavaScript

Output Format

{
  "opportunities": [
    {
      "url": "https://github.com/owner/repo/issues/123",
      "title": "Fix bug in component",
      "reward": "$100",
      "language": "JavaScript",
      "competition": {
        "comments": 2,
        "prs": 0,
        "score": "LOW"
      },
      "payment": {
        "verified": true,
        "method": "USD/Stripe"
      },
      "feasibility": "HIGH"
    }
  ],
  "filtered": {
    "farms": 15,
    "scams": 8,
    "high_competition": 12
  }
}

Configuration

Custom Filters

Add custom farm/scam patterns:

Add "suspicious-repo" to my farm list

Platform Preferences

Set preferred platforms:

Only show bounties from Algora and Opire

Reward Thresholds

Set minimum/maximum rewards:

Only show bounties between $50 and $500

Best Practices

  1. Verify before claiming: Always check competition and payment history
  2. Start small: Begin with lower-value bounties to build reputation
  3. Track payments: Monitor for "paid" labels and tx hashes
  4. Avoid farms: If it looks too good to be true, it probably is
  5. Check activity: Ensure the project is actively maintained

Known Limitations

  • Cannot verify off-chain payments (PayPal, bank transfer)
  • Cannot access private repositories
  • Cannot verify token-based payments without blockchain explorer
  • Farm/scam list needs manual updates

Support

For issues or feature requests, contact @xiaomomini on GitHub.