GitHunt

Find and rank GitHub developers by location, technology, and role. Search for candidates, get scored profiles with tech stack matches, activity, and contact info.

Security Scan

The skill appears to implement a legitimate GitHub-candidate search that calls a third‑party API, but there are small inconsistencies (missing declared dependencies, duplicate/variant docs) and it relies on an external, unverified API for contact data — review before use.

Purpose & Capability

The skill's name, description, scripts, and SKILL.md consistently describe a GitHub developer discovery service that queries https://api.githunt.ai. That purpose aligns with the network calls in the scripts. However the package metadata declares no required binaries while the included shell scripts require curl, jq, sed, and (in docs/examples) gunzip/grep — a mild inconsistency.

Instruction Scope

Runtime instructions limit actions to building JSON payloads and calling the githunt.ai API (streaming or non‑streaming). They do not instruct reading arbitrary local files or environment variables beyond an optional GITHUNT_API_URL override. Minor inconsistencies exist between variant SKILL.md files (streaming vs non‑streaming endpoints, free preview size 10 vs 15) but nothing directs the agent to exfiltrate unrelated system data.

Install Mechanism

No install spec is provided (instruction-only + scripts). No external archives or third‑party package installs are performed by the skill itself, so nothing is written to disk by an installer step beyond the included files.

Credentials

The skill declares no required credentials or environment variables. The scripts do accept an optional GITHUNT_API_URL env var to override the API endpoint, which is reasonable, but the skill does not declare required runtime tools (curl, jq, gunzip). There are no requests for unrelated secrets or system config paths.

Persistence & Privilege

The skill does not request persistently elevated privileges; always is false and it does not modify other skills or system settings. It only makes outbound API calls when invoked.

What to consider before installing

What to consider before installing: - This skill calls an external, third‑party API (https://api.githunt.ai). If you use it the agent will send search queries (locations, skills, etc.) to that service — verify you trust the operator and their privacy/terms (especially when retrieving contact info). - The included scripts expect command‑line tools (curl, jq, sed and optionally gunzip/grep) even though the metadata lists none. Ensure those binaries are available in your agent runtime or the scripts will fail. - The skill requires no credentials, but it may return contact emails/URLs scraped from public profiles; check legal and privacy implications (GDPR, anti‑spam) before using contact data for outreach. - You can mitigate risk by testing with non-sensitive queries first, or by setting GITHUNT_API_URL to a proxy you control to inspect traffic. - The repository/website listed (githunt.ai / github.com/mordka/githunt) appears in metadata — verify the source and maintainers if you plan to pay for full reports or rely on it in production. Overall: the skill is not obviously malicious, but the mismatched dependency declarations, external API reliance, and contact‑info use justify caution and a quick manual vet (verify domain/repo, confirm required CLI tools, and test with safe queries) before enabling in production.

GitHunt - GitHub Developer Discovery

Find top developers on GitHub by location, tech stack, and role. Get scored, ranked candidates with detailed profiles.

Website: https://githunt.ai

When to Use

• Finding developers/candidates in a specific location
• Searching for developers with specific tech stacks
• Recruiting/sourcing engineers
• Building talent pipelines

API Endpoints

Base URL: https://api.githunt.ai/v1

Search Developers (Streaming) - Main Endpoint

Real-time streaming search that returns candidates as they're found. Returns top 10 sample results for free.

curl -N -X POST "https://api.githunt.ai/v1/rank/users/stream" \
  -H "Content-Type: application/json" \
  -H "Accept: text/event-stream" \
  -d '{
    "location": "berlin",
    "role": "frontend",
    "skills": ["react", "typescript"],
    "maxUsers": 100
  }'

Body Parameters:

Param	Required	Description
location	Yes	City, country, or region (e.g., "berlin", "germany", "san francisco")
role	No	Role type (see Supported Roles below)
skills	No	Array of technology keywords to match
maxUsers	No	Max users to search (default: 100)

Supported Roles

Role	Technologies Included
frontend	react, vue, angular, svelte, typescript, css, tailwind, nextjs
backend	nodejs, python, django, flask, go, rust, java, spring, postgresql
fullstack	react, nodejs, nextjs, postgresql, typescript, graphql
mobile	react-native, flutter, swift, kotlin, ios, android
devops	docker, kubernetes, terraform, aws, azure, jenkins, github-actions
data	python, pandas, tensorflow, pytorch, spark, sql, jupyter
security	penetration, owasp, cryptography, ethical-hacking, forensics
blockchain	ethereum, solidity, web3, smart-contract, defi, nft
ai	machine-learning, pytorch, tensorflow, llm, langchain, huggingface
gaming	unity, unreal, godot, opengl, vulkan, game-engine

Rank Single User

Get detailed score for a specific GitHub user.

curl -X POST "https://api.githunt.ai/v1/rank/user" \
  -H "Content-Type: application/json" \
  -d '{
    "username": "torvalds",
    "skills": ["c", "linux"]
  }'

Stream Response Format

The streaming endpoint returns Server-Sent Events (SSE):

data: {"type": "connected", "timestamp": 1234567890}

data: {"type": "user", "data": {"login": "developer1", "name": "...", "score": 85, ...}}

data: {"type": "user", "data": {"login": "developer2", "name": "...", "score": 82, ...}}

data: {"type": "progress", "data": {"found": 10, "searched": 50}}

data: {"type": "complete", "data": {"totalCount": 150, "previewLimitReached": true, "previewLimit": 10}}

User Data Fields

Each user result includes:

{
  "login": "username",
  "name": "Full Name",
  "bio": "Developer bio",
  "location": "Berlin, Germany",
  "company": "@company",
  "email": "[e-mail]",
  "websiteUrl": "https://...",
  "twitterUsername": "handle",
  "isHireable": true,
  "score": 85,
  "avatarUrl": "https://avatars.githubusercontent.com/...",
  "followers": 1234,
  "repositories": 45,
  "primaryLanguage": "TypeScript",
  "languages": ["TypeScript", "Python", "Go"],
  "matchingKeywords": ["react", "typescript", "node"]
}

Free vs Paid

Feature	Free (via API)	Full Report ($19)
Results	Top 10 sample	All matched developers
Export	—	Excel/CSV download
Contact info	Limited	Full (emails, websites, socials)
Scoring details	Basic	Detailed breakdown

💰 Get Full Report

For the complete list of all matched developers with full contact info:

1. Go to https://githunt.ai
2. Run your search with location + role
3. Click "Buy Full Report" ($19 one-time)
4. Get Excel report with all candidates

Usage Examples

Find React Developers in Berlin (Streaming)

curl -N -X POST "https://api.githunt.ai/v1/rank/users/stream" \
  -H "Content-Type: application/json" \
  -H "Accept: text/event-stream" \
  -d '{"location": "berlin", "role": "frontend"}' 2>/dev/null | \
  grep -o '{"type":"user"[^}]*}' | head -5

Score a Specific Candidate

curl -s -X POST "https://api.githunt.ai/v1/rank/user" \
  -H "Content-Type: application/json" \
  -d '{"username": "sindresorhus", "skills": ["javascript", "typescript"]}' | jq

Tips

1. Be specific with location - "san francisco" works better than "usa"
2. Use role OR skills - role auto-includes relevant tech keywords
3. Streaming is real-time - results appear as they're found
4. Free preview = top 10 - buy full report for complete list