ai-talent-hunter

ai-talent-hunter is a skill for Claude Code, Codex from LeoYeAI/openclaw-master-skills. It costs 50 tokens per session (7,823 once invoked), scanned A, original, MIT.

A recruiting assistant that searches public GitHub code and projects for technical candidates, then drafts personalised outreach messages. GitHub is a website where developers publish and collaborate on code.

In plain words
What is it for?
It is for finding engineers, technical co-founders, or candidates for a headhunter’s search by skills, location, activity, and public project history.
Why use it?
It helps you find people by what they have actually built, rather than relying only on CVs or job-site keywords. You review each candidate and message before contacting them.

Skill for Claude CodeCodex

Which agent this was written for is unclear — built for openclaw. Also seen: built for openclaw.

Good fit It is for finding engineers, technical co-founders, or candidates for a headhunter’s search by skills, location, activity, and public project history.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/leoyeai/openclaw-master-skills/ai-talent-hunter
About the project

OpenClaw Master Skills is a curated, regularly updated collection of skills that extends an AI personal assistant platform with capabilities such as research, browser automation, presentation creation, and prompt work. It is intended for people using OpenClaw or MyClaw.ai to give their agents additional tasks and workflows. The catalogue contains many skills and agents from this collection.

LeoYeAI/openclaw-master-skills · 2,141 stars · on GitHub · myclaw.ai

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add LeoYeAI/openclaw-master-skills --skill ai-talent-hunter
Clone the repo
git clone --depth 1 https://github.com/LeoYeAI/openclaw-master-skills

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ai-talent-hunter

README.md
[![agentmods](https://agentmods.dev/badge/skills/leoyeai/openclaw-master-skills/ai-talent-hunter/github.svg)](https://agentmods.dev/skills/leoyeai/openclaw-master-skills/ai-talent-hunter)
Your own site
<a href="https://agentmods.dev/skills/leoyeai/openclaw-master-skills/ai-talent-hunter"><img src="https://agentmods.dev/badge/skills/leoyeai/openclaw-master-skills/ai-talent-hunter/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ai-talent-hunter

Your own site · 80×15
<a href="https://agentmods.dev/skills/leoyeai/openclaw-master-skills/ai-talent-hunter"><img src="https://agentmods.dev/badge/skills/leoyeai/openclaw-master-skills/ai-talent-hunter.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 50 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 7,823 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 5 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Privilege Escalation · line 13
    Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
    Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
  • high Privilege Escalation · line 138
    Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
    Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
  • high Privilege Escalation · line 524
    Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
    Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
  • high Privilege Escalation · line 535
    Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
    Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
  • high Privilege Escalation · line 536
    Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
    Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00050 $0.07823
Opus 5 $0.00025 $0.03911
Sonnet 5 $0.00010 $0.01565
Haiku 4.5 $0.00005 $0.00782

Measured 9d ago against content hash 5dcc25492df3, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

ai-talent-hunter scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

The scan reads SKILL.md. This mod also ships 3 executable files (scripts/candidate_manager.py, scripts/github_search.py, scripts/location_data.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/ai-talent-hunter/SKILL.md · 591 lines

How it starts

The opening of the file, as written. The whole thing — 591 lines — stays where its author put it; the contents beside it link to each section on GitHub.

GitHub 人才猎手 (GitHub Talent Hunter)

从 GitHub 真实代码里找技术人才 — 不看简历看代码,不靠吹嘘靠项目。为 HR、猎头、技术管理者和创业者设计的智能招聘工具。


🔒 安全声明

OpenClaw 安全扫描可能会提示 "Suspicious",这是正常的,原因如下:

  1. 需要 GitHub Token:本 skill 使用 GitHub 公开 API 搜索开发者,需要用户自行配置 Token(详见"安全配置"章节)
  2. 包含 Prompt 模板prompts/ 文件夹包含 JD 解析和话术生成的 Prompt 模板,这是功能需要,不是恶意 prompt injection
  3. 不自动发送消息:本 skill 不会自动发送任何邮件或消息,所有触达话术仅作草稿,需人工审核后手动发送

合规保证

  • ✅ 仅使用 GitHub 公开 API 和公开数据
  • ✅ Human-in-the-Loop:用户逐一确认候选人,不批量骚扰
  • ✅ Token 存储在本地 .env 文件(不上传到 git)
  • ✅ 生成的触达话术需人工审核,不自动执行
  • ❌ 不购买/爬取私密数据
  • ❌ 不绕过任何反爬机制

核心能力

  1. 基于真实代码搜人:直接从 GitHub 代码仓库搜索——找到的是候选人真正做过的项目,不是简历上可以美化的内容,而是实打实写过的代码。传统招聘平台搜不到的技术关键词(如 RocksDB、LangChain、vLLM),在这里能精准命中
  2. 智能排序:按技术匹配度、活跃度、可联系性等维度自动排序,优先展示最值得联系的人
  3. 全球定位:支持按国家、省份、城市筛选候选人,也可不限地区搜索远程人才
  4. 人工筛选:候选人列表由你逐一确认,避免大撒网式骚扰
  5. 个性化触达:根据候选人真实项目经历生成定制话术,让对方感到"你真的了解我"

触发场景

用户可能这样说

  • HR:"帮我找几个做 RAG 的 Python 工程师,深圳的"
  • CEO:"想找个 Rust 大牛来当技术合伙人"
  • 猎头:"客户要招 Next.js 前端,北京,给我 5 个候选人"
  • CTO:"帮我搜一下做分布式存储的 C++ 工程师,要最近半年活跃的"
  • 创业者:"我们在做 AI Agent,想找几个有 LangChain 经验的人聊聊"

Skill 自动执行

  1. 理解招聘需求 → 生成搜索条件(Step 0)
  2. 从 GitHub 搜索候选人 → 构建画像并排序(Step 1)
  3. 展示候选人列表 → 你来选人(Step 1.5)
  4. 展示选中候选人的完整信息 → 最终确认(Step 2)
  5. 为确认的候选人生成个性化触达话术(Step 3)

执行流程

Step 0: 智能解析(JD Parser)

目标:将用户的口语化需求转译为 GitHub 搜索参数。

操作

  1. 读取 prompts/jd_parser_prompt.md
  2. 将用户输入代入 Prompt,生成标准化 JSON
  3. 输出格式:
    {
      "search_queries": [
        "language:c++ rocksdb pushed:>2025-01-01",
        "language:c++ leveldb lsm-tree pushed:>2025-01-01"
      ],
      "target_languages": ["C++"],
      "ecosystem_keywords": ["rocksdb", "leveldb", "lsm-tree"],
      "location": "china",
      "reasoning": "将'RocksDB 相关'转译为 rocksdb + leveldb + lsm-tree 生态"
    }
    

约束规则:详见 prompts/jd_parser_prompt.md(包含查询生成、活跃度过滤、地理位置处理、负向排除等规则)。


Step 1: 搜索(GitHub Search)

目标:从 GitHub 搜索候选人,构建完整画像并全局排序。

操作

cd ~/.openclaw/workspace/skills/ai-talent-hunter

# 首次搜索(宽松位置匹配,默认)
python scripts/github_search.py \
  --queries "language:c++ rocksdb pushed:>2025-01-01" "language:c++ leveldb lsm-tree pushed:>2025-01-01" \
  --jd-keywords "rocksdb,lsm-tree,storage" \
  --jd-language "C++" \
  --location "shenzhen" \
  --target 20 \
  -o results.json

# 首次搜索(严格位置匹配 — 仅匹配指定城市/省份)
python scripts/github_search.py \
  --queries "..." \
  --jd-keywords "..." \
  --jd-language "C++" \
  --location "beijing" \
  --location-strict \
  --target 20 \
  -o results.json

# 继续搜索(当已有结果全部展示完,需要搜更多时)
python scripts/github_search.py --resume SEARCH_ID --target 20 -o results.json

Read the full file on GitHub · 591 lines

Files

What ships with it

9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 591 lines · 50 tokens per session scan A 5dcc25492df3

Subscribe to this mod's changes

ai-talent-hunter is a skill published in the GitHub repository LeoYeAI/openclaw-master-skills (2,141 stars, last pushed 1mo ago), licensed MIT. It adds 50 tokens to every session and 7,823 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories

comfyui-skill-openclaw

Run registered ComfyUI workflows through the fast comfyui-skill CLI, and use the official local Comfy MCP for live template, node, model, validation, and orchestration capabilities. Use this Skill when: (1) The user requests to "generate an image", "draw a picture", or "execute a ComfyUI workflow". (2) The user has…

HuangYuChuh/ComfyUI_Skills_OpenClaw · 125 tokens

openclaw-auto-dream

Cognitive memory architecture for OpenClaw agents — periodic dream cycles that consolidate daily logs into structured long-term memory with importance scoring, insights, and push notifications. Use when: user asks for 'auto memory', 'dream', 'auto-dream', 'memory consolidation', 'memory dashboard'. Powered by…

LeoYeAI/openclaw-auto-dream · 79 tokens

openclaw-ultra-scraping

Powerful web scraping, crawling, and data extraction with stealth anti-bot bypass. Bypasses anti-bot systems (Cloudflare Turnstile, CAPTCHAs) out of the box. Use when: (1) scraping websites that block normal requests, (2) extracting structured data from web pages, (3) crawling multiple pages with concurrency, (4)…

LeoYeAI/openclaw-ultra-scraping · 180 tokens

myclaw-backup

Backup and restore all OpenClaw configuration, agent memory, skills, and workspace data. Part of the MyClaw.ai (https://myclaw.ai) open skills ecosystem — the AI personal assistant platform that gives every user a full server with complete code control. Use when the user wants to create a snapshot of their OpenClaw…

LeoYeAI/openclaw-backup · 179 tokens

agentsec

Audit AI agent skills for security vulnerabilities. Use when scanning installed skills against the OWASP Agentic Skills Top 10, checking skills before running them, gating CI/CD on skill safety, or generating audit reports (text, JSON, SARIF, HTML) for stakeholders.

semiotic-ai/agentsec · 57 tokens

create-teammate

Distill a teammate into an AI Skill. Auto-collect Slack/Teams/GitHub data, generate Work Skill + 5-layer Persona, with continuous evolution. Use when: user wants to capture a colleague's knowledge before they leave, create an AI version of a teammate, distill tribal knowledge into a reusable skill, or says…

LeoYeAI/teammate-skill · 78 tokens