bereniketech/oss-hunter
skills/devtools/oss-hunter/SKILL.md
Automatically hunt for high-impact OSS contribution opportunities in trending repositories.
tools
Updated Apr 19, 2026
$ install --global
skillsauthnpx skillsauth add bereniketech/claude_kit oss-hunterInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 19, 2026, 2:22 AM6.6s2 files scanned
SKILL.md
- name:
- oss-hunter
- description:
- Automatically hunt for high-impact OSS contribution opportunities in trending repositories.
- risk:
- safe
- source:
- https://github.com/jackjin1997/ClawForge
- date_added:
- 2026-02-27
OSS Hunter 🎯
A precision skill for agents to find, analyze, and strategize for high-impact Open Source contributions. This skill helps you become a top-tier contributor by identifying the most "mergeable" and influential issues in trending repositories.
When to Use
- Use when the user asks to find open source issues to work on.
- Use when searching for "help wanted" or "good first issue" tasks in specific domains like AI or Web3.
- Use to generate a "Contribution Dossier" with ready-to-execute strategies for trending projects.
Quick Start
Ask your agent:
- "Find me some help-wanted issues in trending AI repositories."
- "Hunt for bug fixes in langchain-ai/langchain that are suitable for a quick PR."
- "Generate a contribution dossier for the most recent trending projects on GitHub."
Workflow
When hunting for contributions, the agent follows this multi-stage protocol:
Phase 1: Repository Discovery
Use web_search or gh api to find trending repositories.
Focus on:
- Stars > 1000
- Recent activity (pushed within 24 hours)
- Relevant topics (AI, Agentic, Web3, Tooling)
Phase 2: Issue Extraction
Search for specific labels:
help-wantedgood-first-issuebugv1/roadmap
gh issue list --repo owner/repo --label "help wanted" --limit 10
Phase 3: Feasibility Analysis
Analyze the issue:
- Reproducibility: Is there a code snippet to reproduce the bug?
- Impact: How many users does this affect?
- Mergeability: Check recent PR history. Does the maintainer merge community PRs quickly?
- Complexity: Can this be solved by an agent with the current tools?
Phase 4: The Dossier
Generate a structured report for the human:
- Project Name & Stars
- Issue Link & Description
- Root Cause Analysis (based on code inspection)
- Proposed Fix Strategy
- Confidence Score (1-10)
Limitations
- Accuracy depends on the availability of
ghCLI orweb_searchtools. - Analysis is limited by context window when reading very large repositories.
- Cannot guarantee PR acceptance (maintainer discretion).
Contributing to the Matrix
Build a better hunter by adding new heuristics to Phase 3. Submit your improvements to the ClawForge.
Powered by OpenClaw & ClawForge.
Related Skills
bereniketech/anti-reversing-techniques
testing
VerifiedTrustedCommunity
AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.
SKILL.mdUpdated May 3, 2026
bereniketech/active-directory-attacks
testing
Community
Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.
SKILL.mdUpdated May 3, 2026
bereniketech/zeroize-audit
development
VerifiedTrustedCommunity
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.
SKILL.mdUpdated May 3, 2026
bereniketech/wcag-audit-patterns
development
VerifiedTrustedCommunity
Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation strategies.
SKILL.mdUpdated May 3, 2026