bounty-guard
Pre-flight GitHub bounty security scanner and on-chain Proof-of-Escrow MCP verifier for AI coding agents. Classifies GitHub bounties into SAFE_WITH_ESCROW, SAFE_NO_ESCROW, or QUARANTINE.
Install / Use
npx skills add hashgraph-online/awesome-codex-plugins --skill bounty-guardInstalls into whichever agent you are using.
SKILL.md
Installable skill definition
Quality Score
Category
SecuritySupported Platforms
Our assessment of bounty-guard
bounty-guard scores 85/100 on our quality scale, 821st of 1,100 Security skills we index.
Its SKILL.md is 921 bytes long, split into 4 sections with 1 code example: fairly brief, so expect to fill in details yourself.
With 1,075 GitHub stars, it is one of the more widely adopted skills in the catalogue.
Maintenance, license and trust
- The repository was last updated about 2 months ago, so bounty-guard is actively maintained.
- It is released under the Apache-2.0 license, a permissive license that allows use, modification and commercial use with attribution.
- Its trust signals score 100/100, with no cautions. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.
bounty-guard compared with similar skills
All 4 of these similar skills score higher than bounty-guard; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| bounty-guard (this skill)by hashgraph-online | 85 | 1.1k | 46d ago | SKILL.md |
| Agent-Reachby Panniantong | 100 | 110.4k | 1d ago | CLAUDE.md |
| rufloby ruvnet | 100 | 81.3k | today | CLAUDE.md |
| headroomby headroomlabs-ai | 100 | 79.2k | 1d ago | CLAUDE.md |
| CowAgentby zhayujie | 100 | 47.8k | today | CLAUDE.md |
Frequently asked questions
- How do I install bounty-guard?
- Run
npx skills add hashgraph-online/awesome-codex-plugins --skill bounty-guard. The install tabs above show the steps for each supported agent. - Which AI agents does bounty-guard work with?
- It is written for Universal, as a SKILL.md file. Other agents that read the same format can often use it too.
- Is bounty-guard safe to use?
- It is Apache-2.0-licensed and scores 100/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is bounty-guard still maintained?
- The repository was last updated about 2 months ago, so bounty-guard is actively maintained.
Skill content
View source on GitHubname: bounty-guard description: Pre-flight GitHub bounty security scanner and on-chain Proof-of-Escrow MCP verifier for AI coding agents. Classifies GitHub bounties into SAFE_WITH_ESCROW, SAFE_NO_ESCROW, or QUARANTINE.
BountyGuard Skill
Overview
BountyGuard is a read-only pre-flight security audit tool and Model Context Protocol (MCP) server that evaluates open GitHub bounty issues before an AI agent invests compute.
MCP Tools Provided
list_escrows: Lists all open verified Proof-of-Escrow GitHub bounties backed by locked on-chain reserves.verify_issue_escrow: Verifies on-chain escrow backing for a specific GitHub issue (owner/repo#number).get_pool_leaderboard: Returns live Proof-of-Work mining pool leaderboard telemetry.
Local CLI Verification
Run the built-in Python module on any repository issue identifier:
python3 -m bountyguard check owner/repo#1
Related Skills
Agent-Reach
110.4kGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
ruflo
81.3k🌊 The original agent harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory, self-learning intelligence, federation, vector RAG integration, and native Claude Code / Codex / Hermes and many more Integrated
headroom
79.2kCompress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.
CowAgent
47.8kOpen-source personal AI assistant & Agent Harness. Plans tasks, runs tools and skills, self-evolves with memory and knowledge. Multi-agent, multi-model, multi-channel. Lightweight, extensible, one-line install.
Languages
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.