OpenClaw Master Skills is a curated, regularly updated collection of skills that extends an AI personal assistant platform with capabilities such as research, browser automation, presentation creation, and prompt work. It is intended for people using OpenClaw or MyClaw.ai to give their agents additional tasks and workflows. The catalogue contains many skills and agents from this collection.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add LeoYeAI/openclaw-master-skills --skill ai-talent-huntergit clone --depth 1 https://github.com/LeoYeAI/openclaw-master-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/leoyeai/openclaw-master-skills/ai-talent-hunter)<a href="https://agentmods.dev/skills/leoyeai/openclaw-master-skills/ai-talent-hunter"><img src="https://agentmods.dev/badge/skills/leoyeai/openclaw-master-skills/ai-talent-hunter/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/leoyeai/openclaw-master-skills/ai-talent-hunter"><img src="https://agentmods.dev/badge/skills/leoyeai/openclaw-master-skills/ai-talent-hunter.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 5 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 13 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 138 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 524 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 535 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 536 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00050 | $0.07823 |
| Opus 5 | $0.00025 | $0.03911 |
| Sonnet 5 | $0.00010 | $0.01565 |
| Haiku 4.5 | $0.00005 | $0.00782 |
Grade A, and why
ai-talent-hunter scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 591 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GitHub 人才猎手 (GitHub Talent Hunter)
从 GitHub 真实代码里找技术人才 — 不看简历看代码,不靠吹嘘靠项目。为 HR、猎头、技术管理者和创业者设计的智能招聘工具。
🔒 安全声明
OpenClaw 安全扫描可能会提示 "Suspicious",这是正常的,原因如下:
- 需要 GitHub Token:本 skill 使用 GitHub 公开 API 搜索开发者,需要用户自行配置 Token(详见"安全配置"章节)
- 包含 Prompt 模板:
prompts/文件夹包含 JD 解析和话术生成的 Prompt 模板,这是功能需要,不是恶意 prompt injection - 不自动发送消息:本 skill 不会自动发送任何邮件或消息,所有触达话术仅作草稿,需人工审核后手动发送
合规保证:
- ✅ 仅使用 GitHub 公开 API 和公开数据
- ✅ Human-in-the-Loop:用户逐一确认候选人,不批量骚扰
- ✅ Token 存储在本地
.env文件(不上传到 git) - ✅ 生成的触达话术需人工审核,不自动执行
- ❌ 不购买/爬取私密数据
- ❌ 不绕过任何反爬机制
核心能力
- 基于真实代码搜人:直接从 GitHub 代码仓库搜索——找到的是候选人真正做过的项目,不是简历上可以美化的内容,而是实打实写过的代码。传统招聘平台搜不到的技术关键词(如 RocksDB、LangChain、vLLM),在这里能精准命中
- 智能排序:按技术匹配度、活跃度、可联系性等维度自动排序,优先展示最值得联系的人
- 全球定位:支持按国家、省份、城市筛选候选人,也可不限地区搜索远程人才
- 人工筛选:候选人列表由你逐一确认,避免大撒网式骚扰
- 个性化触达:根据候选人真实项目经历生成定制话术,让对方感到"你真的了解我"
触发场景
用户可能这样说:
- HR:"帮我找几个做 RAG 的 Python 工程师,深圳的"
- CEO:"想找个 Rust 大牛来当技术合伙人"
- 猎头:"客户要招 Next.js 前端,北京,给我 5 个候选人"
- CTO:"帮我搜一下做分布式存储的 C++ 工程师,要最近半年活跃的"
- 创业者:"我们在做 AI Agent,想找几个有 LangChain 经验的人聊聊"
Skill 自动执行:
- 理解招聘需求 → 生成搜索条件(Step 0)
- 从 GitHub 搜索候选人 → 构建画像并排序(Step 1)
- 展示候选人列表 → 你来选人(Step 1.5)
- 展示选中候选人的完整信息 → 最终确认(Step 2)
- 为确认的候选人生成个性化触达话术(Step 3)
执行流程
Step 0: 智能解析(JD Parser)
目标:将用户的口语化需求转译为 GitHub 搜索参数。
操作:
- 读取
prompts/jd_parser_prompt.md - 将用户输入代入 Prompt,生成标准化 JSON
- 输出格式:
{ "search_queries": [ "language:c++ rocksdb pushed:>2025-01-01", "language:c++ leveldb lsm-tree pushed:>2025-01-01" ], "target_languages": ["C++"], "ecosystem_keywords": ["rocksdb", "leveldb", "lsm-tree"], "location": "china", "reasoning": "将'RocksDB 相关'转译为 rocksdb + leveldb + lsm-tree 生态" }
约束规则:详见 prompts/jd_parser_prompt.md(包含查询生成、活跃度过滤、地理位置处理、负向排除等规则)。
Step 1: 搜索(GitHub Search)
目标:从 GitHub 搜索候选人,构建完整画像并全局排序。
操作:
cd ~/.openclaw/workspace/skills/ai-talent-hunter
# 首次搜索(宽松位置匹配,默认)
python scripts/github_search.py \
--queries "language:c++ rocksdb pushed:>2025-01-01" "language:c++ leveldb lsm-tree pushed:>2025-01-01" \
--jd-keywords "rocksdb,lsm-tree,storage" \
--jd-language "C++" \
--location "shenzhen" \
--target 20 \
-o results.json
# 首次搜索(严格位置匹配 — 仅匹配指定城市/省份)
python scripts/github_search.py \
--queries "..." \
--jd-keywords "..." \
--jd-language "C++" \
--location "beijing" \
--location-strict \
--target 20 \
-o results.json
# 继续搜索(当已有结果全部展示完,需要搜更多时)
python scripts/github_search.py --resume SEARCH_ID --target 20 -o results.json
What ships with it
9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 591 lines · 50 tokens per session scan A 5dcc25492df3
ai-talent-hunter is a skill published in the GitHub repository LeoYeAI/openclaw-master-skills (2,141 stars, last pushed 1mo ago), licensed MIT. It adds 50 tokens to every session and 7,823 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
comfyui-skill-openclaw
Run registered ComfyUI workflows through the fast comfyui-skill CLI, and use the official local Comfy MCP for live template, node, model, validation, and orchestration capabilities. Use this Skill when: (1) The user requests to "generate an image", "draw a picture", or "execute a ComfyUI workflow". (2) The user has…
openclaw-auto-dream
Cognitive memory architecture for OpenClaw agents — periodic dream cycles that consolidate daily logs into structured long-term memory with importance scoring, insights, and push notifications. Use when: user asks for 'auto memory', 'dream', 'auto-dream', 'memory consolidation', 'memory dashboard'. Powered by…
openclaw-ultra-scraping
Powerful web scraping, crawling, and data extraction with stealth anti-bot bypass. Bypasses anti-bot systems (Cloudflare Turnstile, CAPTCHAs) out of the box. Use when: (1) scraping websites that block normal requests, (2) extracting structured data from web pages, (3) crawling multiple pages with concurrency, (4)…
myclaw-backup
Backup and restore all OpenClaw configuration, agent memory, skills, and workspace data. Part of the MyClaw.ai (https://myclaw.ai) open skills ecosystem — the AI personal assistant platform that gives every user a full server with complete code control. Use when the user wants to create a snapshot of their OpenClaw…
agentsec
Audit AI agent skills for security vulnerabilities. Use when scanning installed skills against the OWASP Agentic Skills Top 10, checking skills before running them, gating CI/CD on skill safety, or generating audit reports (text, JSON, SARIF, HTML) for stakeholders.
create-teammate
Distill a teammate into an AI Skill. Auto-collect Slack/Teams/GitHub data, generate Work Skill + 5-layer Persona, with continuous evolution. Use when: user wants to capture a colleague's knowledge before they leave, create an AI version of a teammate, distill tribal knowledge into a reusable skill, or says…