github-bounty-hunter

Automatically scan GitHub repositories for open issues with 0 comments, evaluate their value, claim them, and submit PRs. Automates the entire GitHub bounty hunting workflow for passive income generation. Use when the user wants to find and complete GitHub issues for money, automate bounty hunting, or set up passive income from open source contributions.

Safety Notice

This listing is from the official public ClawHub registry. Review SKILL.md and referenced scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "github-bounty-hunter" with this command: npx skills add dagangtj/auto-bounty-hunter

GitHub Bounty Hunter

Automate the entire GitHub bounty hunting workflow: scan for opportunities, evaluate value, claim issues, and submit PRs.

What This Skill Does

  1. Scans GitHub for 0-comment issues (first-mover advantage)
  2. Evaluates issue value and complexity
  3. Claims viable issues automatically
  4. Submits PRs with quality implementations
  5. Tracks submissions and monitors merge status

Usage

Quick Start

# Scan and process issues automatically
bash scripts/bounty_hunter.sh

Configuration

Edit scripts/config.sh to customize:

MIN_VALUE=10           # Minimum estimated value ($)
MAX_COMPLEXITY=5       # Max complexity (1-10 scale)
AUTO_CLAIM=true        # Auto-claim issues
AUTO_SUBMIT=true       # Auto-submit PRs

Automated Operation

Set up cron for continuous scanning:

# Every 30 minutes
*/30 * * * * bash ~/.openclaw/workspace/skills/github-bounty-hunter/scripts/bounty_hunter.sh

How It Works

  1. Discovery: Searches GitHub for is:issue is:open comments:0
  2. Filtering: Removes spam, duplicates, and low-value issues
  3. Evaluation: Scores based on:
    • Repository stars/activity
    • Issue clarity and scope
    • Estimated time to complete
    • Potential payout
  4. Claiming: Comments on issue to claim it
  5. Implementation: Generates solution and submits PR
  6. Tracking: Monitors PR status and merge events

Scripts

  • bounty_hunter.sh - Main automation script
  • config.sh - Configuration settings
  • evaluator.sh - Issue value evaluation
  • tracker.sh - PR status tracking

Best Practices

  • Start with AUTO_CLAIM=false to review opportunities first
  • Focus on repositories with clear contribution guidelines
  • Maintain high PR quality to build reputation
  • Track merge rate and adjust strategy

Revenue Potential

  • Conservative: $50-200/month (5-10 merged PRs)
  • Moderate: $200-500/month (10-25 merged PRs)
  • Aggressive: $500-1000/month (25-50 merged PRs)

Success depends on:

  • PR quality and merge rate
  • Time invested
  • Repository selection
  • Market conditions

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Related Skills

Related by shared tags or category signals.

Coding

Web Research Assistant

AI-powered web research assistant that leverages BrowserAct API to supplement restricted web access by searching the internet for additional information. Designed for OpenClaw and Claude Code.

Registry SourceRecently Updated
2.5K3phheng
Coding

Pandoc Convert

Convert documents between 40+ formats using pandoc CLI. Handles Markdown ↔ Word ↔ PDF ↔ HTML ↔ LaTeX ↔ EPUB with smart defaults, professional templates, and comprehensive tooling.

Registry SourceRecently Updated
Coding

Monitored Ralph Loop

Generate copy-paste bash scripts for Ralph Wiggum/AI agent loops (Codex, Claude Code, OpenCode, Goose). Use when asked for a "Ralph loop", "Ralph Wiggum loop", or an AI loop to plan/build code via PROMPT.md + AGENTS.md, SPECS, and IMPLEMENTATION_PLAN.md, including PLANNING vs BUILDING modes, backpressure, sandboxing, and completion conditions.

Registry SourceRecently Updated
1.3K0endogen
Coding

Forge

Autonomous quality engineering swarm that forges production-ready code through continuous behavioral verification, exhaustive E2E testing, and self-healing fix loops. Combines DDD+ADR+TDD methodology with BDD/Gherkin specifications, 7 quality gates, defect prediction, chaos testing, and cross-context dependency awareness. Architecture-agnostic — works with monoliths, microservices, modular monoliths, and any bounded-context topology.

Registry SourceRecently Updated