oss-bounty-finder

What this skill does

# OSS Bounty & Grant Finder — Find Paid Open Source Work

You have access to the TinyFish CLI (`tinyfish`), a tool that runs browser automations from the terminal using natural language goals. This skill uses it to search bounty platforms, GitHub repos, and grant foundation pages in parallel, then synthesizes results into a structured paid opportunities report.

## Pre-flight Check (REQUIRED)

Before making any TinyFish call, always run BOTH checks:

**1. CLI installed?**

PowerShell:
```powershell
Get-Command tinyfish; tinyfish --version
```
bash/zsh:
```bash
which tinyfish && tinyfish --version || echo "TINYFISH_CLI_NOT_INSTALLED"
```

If not installed, stop and tell the user:
> Install the TinyFish CLI: `npm install -g @tiny-fish/cli`

**2. Authenticated?**

```powershell
tinyfish auth status
```

If not authenticated, stop and tell the user:

> You need a TinyFish API key. Get one at: https://agent.tinyfish.ai/api-keys
>
> Then authenticate:
>
> **Option 1 — CLI login (interactive):**
> ```
> tinyfish auth login
> ```
>
> **Option 2 — PowerShell (current session only):**
> ```powershell
> $env:TINYFISH_API_KEY="your_api_key_here"
> ```
>
> **Option 3 — PowerShell (persist across sessions):**
> ```powershell
> [System.Environment]::SetEnvironmentVariable("TINYFISH_API_KEY", "your_api_key_here", "User")
> ```
> Then close and reopen PowerShell for it to take effect.
>
> **Option 4 — bash/zsh (Mac/Linux):**
> ```bash
> export TINYFISH_API_KEY="your_api_key_here"
> ```
>
> **Option 5 — Claude Code settings:** Add to `~/.claude/settings.local.json`:
> ```json
> {
>   "env": {
>     "TINYFISH_API_KEY": "your_api_key_here"
>   }
> }
> ```

Do NOT proceed until both checks pass.

---

## What This Skill Does

Given a developer's stack and optional keywords (e.g. *"Rust, async"*), this skill:

1. **Tier 1** — Scrapes **Algora** and **IssueHunt**, bounty platforms that already curate paid OSS issues
2. **Tier 2** — Scrapes the **awesome-`<stack>`** GitHub list to discover top repos, then fans out to check each repo's bounty-labelled issues
3. **Tier 3** — Scrapes **NLNet, Sovereign Tech Fund, Mozilla MOSS, LFX Mentorship, GSoC, and Outreachy** for open grant calls

All three tiers run in parallel. Results are synthesized into a structured opportunities report.

---

## Core Command

```bash
tinyfish agent run --url <url> "<goal>"
```

### Flags

| Flag | Purpose |
|------|---------|
| `--url <url>` | Target website URL |
| `--sync` | Wait for full result (no streaming) |
| `--async` | Submit and return immediately |
| `--pretty` | Human-readable formatted output |

---

## Inputs

Ask the user for:

| Input | Required | Example |
|-------|----------|---------|
| `stack` | ✅ Yes | `Rust`, `Python`, `Go`, `TypeScript` |
| `keywords` | Optional | `async`, `cli`, `web3` |
| `min_amount` | Optional | `100` (minimum bounty $ to include) |

---

## Step-by-Step Workflow

### Tier 1 — Bounty Aggregator Platforms

Scrape Algora and IssueHunt in parallel. These platforms already curate and index bounties — one agent per platform.

**Algora:**
```bash
tinyfish agent run --sync \
  --url "https://algora.io/bounties?lang=<stack>" \
  "This is Algora.io, a paid OSS bounty platform filtered for <stack>. Extract all visible open bounty listings. Only include bounties relevant to <stack> — skip any for unrelated languages. Return as JSON array: [{\"title\": str, \"repo\": str, \"url\": str, \"bountyAmount\": number, \"currency\": str, \"skills\": [str]}]"
```

**IssueHunt:**
```bash
tinyfish agent run --sync \
  --url "https://issuehunt.io/repos?language=<stack>" \
  "This is IssueHunt, a paid OSS bounty platform filtered for <stack>. Extract all open bounty listings. Only include bounties relevant to <stack>. Return as JSON array: [{\"title\": str, \"repo\": str, \"url\": str, \"bountyAmount\": number, \"currency\": str, \"skills\": [str]}]"
```

**Example for Rust:**
```bash
tinyfish agent run --sync \
  --url "https://algora.io/bounties?lang=rust" \
  "This is Algora.io filtered for Rust. Extract all open Rust bounties. Skip any for Scala, Java, Python or other non-Rust stacks. Return as JSON array: [{\"title\": str, \"repo\": str, \"url\": str, \"bountyAmount\": number, \"currency\": \"USD\", \"skills\": [str]}]"
```

---

### Tier 2 — Awesome List → Repo Fan-Out

This is a two-stage process. Run Stage 2 agents in parallel once Stage 1 completes.

**Awesome list URLs by stack:**

| Stack | Awesome List URL |
|-------|-----------------|
| Rust | `https://github.com/rust-unofficial/awesome-rust` |
| Go | `https://github.com/avelino/awesome-go` |
| Python | `https://github.com/vinta/awesome-python` |
| TypeScript | `https://github.com/dzharii/awesome-typescript` |
| JavaScript | `https://github.com/sorrycc/awesome-javascript` |
| C++ | `https://github.com/fffaraz/awesome-cpp` |
| Java | `https://github.com/akullpp/awesome-java` |
| Swift | `https://github.com/matteocrippa/awesome-swift` |
| Elixir | `https://github.com/h4cc/awesome-elixir` |
| Zig | `https://github.com/catdevnull/awesome-zig` |

**Stage 2a — Discover repos from awesome list:**
```bash
tinyfish agent run --sync \
  --url "https://github.com/<awesome-list-url>" \
  "This is a GitHub awesome list. Extract GitHub repo URLs from the README. Return JSON: {\"repos\": [\"https://github.com/owner/repo\"]}. Rules: only owner/repo paths, skip wikis/gists/topics, skip the list repo itself, first 25 unique repos only."
```

**Stage 2b — Check each repo for bounty issues (run all in parallel):**
```bash
tinyfish agent run --sync \
  --url "https://github.com/<owner>/<repo>/issues?q=is%3Aopen+label%3Abounty+OR+bounty+in%3Atitle+OR+reward+in%3Atitle" \
  "This is a GitHub issues page. Extract all visible issues mentioning bounty, reward, or paid work. Return as JSON array: [{\"title\": str, \"repo\": str, \"url\": str, \"bountyAmount\": number or null, \"currency\": str or null, \"labels\": [str], \"skills\": [str], \"difficulty\": str}]. Return [] if no issues visible."
```

---

### Tier 3 — Grant Programs

Scrape all six grant foundations in parallel. These are language-agnostic — always run regardless of stack.

```bash
# NLNet / NGI Zero
tinyfish agent run --sync \
  --url "https://nlnet.nl/thema/" \
  "This is the NLNet grants page. Extract all currently open grant programs. Return as JSON array: [{\"title\": str, \"url\": str, \"bountyAmount\": number, \"currency\": \"EUR\", \"deadline\": str, \"description\": str, \"labels\": [\"grant\", \"nlnet\"]}]"

# Sovereign Tech Fund
tinyfish agent run --sync \
  --url "https://www.sovereigntechfund.de/programs" \
  "This is the Sovereign Tech Fund grants page. Extract all open programs. Return as JSON array: [{\"title\": str, \"url\": str, \"bountyAmount\": number, \"currency\": \"EUR\", \"deadline\": str, \"description\": str, \"labels\": [\"grant\", \"stf\"]}]"

# Mozilla MOSS
tinyfish agent run --sync \
  --url "https://www.mozilla.org/en-US/moss/" \
  "This is Mozilla MOSS grants page. Extract all open grant tracks. Return as JSON array: [{\"title\": str, \"url\": str, \"bountyAmount\": number, \"currency\": \"USD\", \"deadline\": str, \"description\": str, \"labels\": [\"grant\", \"mozilla\"]}]"

# LFX Mentorship
tinyfish agent run --sync \
  --url "https://lfx.linuxfoundation.org/tools/mentorship/" \
  "This is the LFX Mentorship page. Extract all open mentorship programs. Return as JSON array: [{\"title\": str, \"url\": str, \"bountyAmount\": number, \"currency\": \"USD\", \"deadline\": str, \"description\": str, \"labels\": [\"grant\", \"lfx\"]}]"

# Google Summer of Code
tinyfish agent run --sync \
  --url "https://summerofcode.withgoogle.com/" \
  "This is Google Summer of Code. Extract program details and open application info. Return as JSON array: [{\"title\": str, \"url\": str, \"bountyAmount\": number, \"currency\": \"USD\", \"deadline\": str, \"description\": str, \"labels\": [\"grant\", \"gsoc\"]}]"

# Outreachy
tinyfish agent run --sync \
  --url "htt