GitHub Bounty Hunter#

A skill for finding legitimate GitHub bounty opportunities by filtering out farm/scam repositories and tracking competition.

What This Skill Does#

1. Scans GitHub for bounty opportunities using multiple search strategies
2. Filters out farms/scams using known patterns (AgentOrchestration, RustChain, etc.)
3. Tracks competition by counting comments, PRs, and claims
4. Monitors payment history by checking for "paid" labels and tx hashes
5. Reports viable opportunities with clear scoring

Usage#

Basic Scan#

Ask your agent to scan for bounties:

text

Scan GitHub for legitimate bounty opportunities

Filtered Scan#

Specify your criteria:

text

Find JavaScript bounties under $200 with less than 5 comments

Competition Check#

Check a specific bounty:

text

Check competition for https://github.com/owner/repo/issues/123

Payment History#

Check if a project pays:

text

Check payment history for owner/repo

How It Works#

Farm/Scam Detection#

The skill maintains a list of known farm/scam patterns:

• AgentOrchestration: 2310+ issues, only bot contributor, requires star
• RustChain: Token has no market value, closed without merge
• Generic farms: High issue count, low contributor count, unclear payment

Competition Scoring#

Bounties are scored based on:

FactorWeightLow CompetitionHigh CompetitionComments40%<5>10PRs30%<3>5Claims20%<2>5Age10%<7 days>30 days

Payment Verification#

Checks for:

• "paid" label on issue
• Comments with tx hash or payment confirmation
• Maintainer response confirming payment
• Historical payment patterns

Search Strategies#

1. Label-Based Search#

text

label:bounty language:JavaScript created:>2026-05-15
label:"good first issue" language:Python created:>2026-05-15
label:sponsored language:TypeScript created:>2026-05-15

2. Platform-Specific Search#

text

org:algora-io is:issue is:open
org:opire is:issue is:open

3. Keyword Search#

text

"bounty" OR "reward" OR "payment" in:readme language:JavaScript

Output Format#

json

{
  "opportunities": [
    {
      "url": "https://github.com/owner/repo/issues/123",
      "title": "Fix bug in component",
      "reward": "$100",
      "language": "JavaScript",
      "competition": {
        "comments": 2,
        "prs": 0,
        "score": "LOW"
      },
      "payment": {
        "verified": true,
        "method": "USD/Stripe"
      },
      "feasibility": "HIGH"
    }
  ],
  "filtered": {
    "farms": 15,
    "scams": 8,
    "high_competition": 12
  }
}

Configuration#

Custom Filters#

Add custom farm/scam patterns:

text

Add "suspicious-repo" to my farm list

Platform Preferences#

Set preferred platforms:

text

Only show bounties from Algora and Opire

Reward Thresholds#

Set minimum/maximum rewards:

text

Only show bounties between $50 and $500

Best Practices#

1. Verify before claiming: Always check competition and payment history
2. Start small: Begin with lower-value bounties to build reputation
3. Track payments: Monitor for "paid" labels and tx hashes
4. Avoid farms: If it looks too good to be true, it probably is
5. Check activity: Ensure the project is actively maintained

Known Limitations#

• Cannot verify off-chain payments (PayPal, bank transfer)
• Cannot access private repositories
• Cannot verify token-based payments without blockchain explorer
• Farm/scam list needs manual updates

Support#

For issues or feature requests, contact @xiaomomini on GitHub.