Verticalmove / GitHub Talent Scout Download free AI skill
Free agent skill for Claude Code and Codex · By Verticalmove

Find engineers by what they've merged. Not what their résumés claim.

GitHub Talent Scout is a skill file your coding agent runs against GitHub's public REST API. Give it a role. It maps the open-source projects that matter, pulls merged pull requests and code reviews, and returns a ranked shortlist. Every claim links to the code behind it.

Plain markdown. Runs locally under your own GitHub token. Nothing goes anywhere except GitHub and your model provider.

No email gateReadable, editable SKILL.mdRespects GitHub rate limits
01 · INPUT
Role spec
JD or a paragraph on the problem
02 · MAP
Repo ecosystem
gh search repos
03 · EVIDENCE
Merged PRs + reviews
gh search prs --merged
04 · OUTPUT
Ranked shortlist
Every row cites a PR
The signal problem

A résumé is a claim. A merged PR is a reviewed artifact.

Keyword search finds people who wrote "Kubernetes" on a profile. It can't tell you who fixed the scheduler bug you hit last quarter.

Public GitHub history can. A merged pull request to a serious project has passed review by maintainers who had no reason to be generous. Review comments show how someone reasons about other people's code. Sustained contribution shows judgment over time, not a weekend.

This doesn't replace interviews. It changes who gets one.

What a profile tells you

  • Lists Rust, Arrow, query optimization
  • "Led performance improvements"
  • Title and tenure at a known company
  • Endorsements from former colleagues

What the contribution graph shows

  • 11 merged PRs to the physical planner
  • A 40% speedup on a join operator, with benchmarks in the PR
  • 60+ reviews given to other contributors
  • Active 20 of the last 24 months, not one burst

Right column is an illustrative example, not a real engineer.

The GitHub public API

GitHub publishes an API anyone with an account can query. Most hiring teams don't know it exists.

GitHub's REST API is the same documented interface developers use to build integrations. For public data it returns repositories, pull requests, code reviews, and public profile fields as structured JSON. It's free, and you can verify every claim on this page from GitHub's own documentation.

NO SEPARATE SIGN-UP

Your GitHub account is the API account

There's no developer program to apply for and no API key to request. Any GitHub account can authenticate. Authenticating raises your limits from 60 to 5,000 requests an hour.

GitHub Docs: Getting started with the REST API ↗
OPTION A · RECOMMENDED

Authenticate with GitHub CLI

Run gh auth login and approve in your browser. The CLI stores a token for you. No token to copy, paste, or rotate by hand.

GitHub CLI manual: gh auth login ↗
OPTION B

Create a personal access token

Prefer explicit control? Create a fine-grained token with read-only access to public repositories. It can't write anything and you can revoke it anytime.

GitHub Docs: Managing personal access tokens ↗
Verify it yourselfyour live limits, straight from GitHub
gh api rate_limit --jq '.resources | {core, search, code_search}'

What GitHub allows, per its documentation

5,000 / hour
REST requests for an authenticated personal account. Unauthenticated: 60 an hour.
Source: REST API rate limits ↗
30 / minute
Authenticated search requests. Unauthenticated: 10. Code search: 10, authenticated.
Source: Search API docs ↗
1,000
Maximum results returned for any single search query. Narrow queries beat broad ones.
Source: Search API docs ↗

GitHub publishes no daily search quota. Limits are enforced per minute and per hour, secondary limits also apply, and GitHub can change any of them. In practice, search is what paces a run, not the 5,000-an-hour core limit.

Under the hood

A sourcing playbook your agent executes with gh.

The skill doesn't ship a scraper or a hidden service. It's an instruction file. It tells your agent what to query, in what order, what to read, and how to score what it finds. Your agent runs standard GitHub CLI and REST calls under your authenticated account.

Representative callsillustrative · the skill adapts these per role
# 1. Map the ecosystem: which repos matter for this role
gh search repos "query engine" --language=rust --sort=stars --limit 20

# 2. Pull merged work, not activity
gh search prs --repo apache/datafusion --merged \
  --merged-at ">2025-04-01" --limit 100 --json author,title,url,closedAt

# 3. Read the evidence: what changed, who reviewed it
gh pr view <number> --repo apache/datafusion \
  --json files,additions,deletions,reviews

# 4. Public profile context only
gh api users/<login> --jq '{login,name,company,blog,location}'
STAGE 1

Decompose the role

Turns the JD into capabilities, then into projects, modules, and file paths where that work actually happens.

STAGE 2

Map and filter repos

Finds adjacent projects you'd miss. Drops forks, archived repos, and anything without active review.

STAGE 3

Collect evidence

Merged PRs in a time window, files touched, reviews given and received. Search calls are paced to stay inside limits.

STAGE 4

Score and cite

Ranks against the rubric below. Every rating carries the PR links that justify it, plus what still needs verifying.

The scoring rubric

What counts as evidence. What gets ignored.

Green squares are easy to farm. The skill weights work that another engineer had to review and accept, and discounts activity nobody checked.

Weighted heavily

Reviewed, merged, sustained

  • Merged PRs touching core modules, not the periphery
  • Code reviews given on other contributors' PRs
  • Design discussion in issues or RFCs that shaped a change
  • Contribution spread across 12+ months
  • Committer or maintainer status
Context only

Useful, not decisive

  • Original repos with real users or downstream dependents
  • Detailed bug reports with reproductions
  • Docs and examples tied to code they wrote
  • Public profile fields: company, location, blog
Discounted

Noise

  • Contribution graph density and streaks
  • Stars, followers, and forks
  • Typo and dependency-bump PRs
  • Unmodified forks and tutorial repos
  • Bot and generated commits

Built to not invent things. The skill instructs the agent to state only what the data shows. No guessing seniority, employer, or location beyond the public profile. Gaps are listed as open questions, not filled in.

Write the search like a spec

Your first search starts with one role spec.

Vague prompts get vague shortlists. Name the repos you know, the modules that matter, a time window, exclusions, and the output you want. Pick an example, copy it, and edit the specifics.

Role specpaste into Claude Code or Codex
What comes back

From thousands of contributors to a shortlist you can defend.

The output is a table your hiring team can audit. Each rating carries the PRs that justify it, the volume behind it, and what the data can't tell you.

shortlist.md · 3 of 25 shownFictional examples
ContributorStrongest evidenceVolumeFitVerify before outreach
@sample-dev-a query-engine#0000 Join reordering in the cost-based optimizer
query-engine#0000 Spill-to-disk for hash aggregate
14 merged · 52 reviews
active 21/24 mo
StrongCore planner work, accepted by maintainers Current employer, whether contributing is part of their job
@sample-dev-b columnar-format#0000 SIMD kernels for string comparison 6 merged · 4 reviews
active 7/24 mo
ModerateDeep but narrow. Little review activity Breadth beyond kernels, scope of ownership
@sample-dev-c embedded-olap#0000 Parallel Parquet reader
RFC thread on morsel-driven scheduling
9 merged · 31 reviews
active 15/24 mo
StrongDesign input plus merged implementation Location, work authorization, interest

Evidence, not a verdict. Public contributions don't show private work, job-search intent, availability, or compensation. Most strong engineers have little public code. Treat this as one sourcing channel with high precision and limited coverage.

Constraints worth knowing

Powerful research. Honest limits.

The API gives you the data. It doesn't give you the whole market, and it comes with rules.

Coverage is uneven

Open-source work concentrates in infrastructure, data, developer tools, and ML systems. For product engineering or regulated domains, public signal is thin. The skill says so instead of padding the list.

Contributor ≠ available

Many top contributors are paid by a vendor to work on that project. That's useful context, and it usually means a harder recruit. The shortlist flags it where the profile shows it.

GitHub's rules

Research, yes. Harvesting emails, no.

GitHub's Acceptable Use Policies prohibit using information from the platform, including data pulled through the API, to send unsolicited emails or to sell personal information to recruiters. The skill is built for research, not list-building.

  • It doesn't extract email addresses from commit metadata
  • It records only public profile fields and links to public work
  • Reach out through channels people chose to publish, or through your network
Read GitHub's Acceptable Use Policies ↗

Sources

  1. Getting started with the REST API · GitHub Docs
  2. Rate limits for the REST API · GitHub Docs
  3. REST API endpoints for search · GitHub Docs
  4. REST API endpoints for rate limits · GitHub Docs
  5. gh auth login · GitHub CLI manual
  6. Managing your personal access tokens · GitHub Docs
  7. GitHub Acceptable Use Policies · GitHub Docs

Checked against GitHub's documentation in October 2026.

Install

Five minutes if you already use gh.

You need three things: a GitHub account, an authenticated GitHub CLI, and a coding agent that supports skills.

01

GitHub account

Free is fine. Sign up ↗

02

GitHub CLI, authenticated

Install gh ↗ then run gh auth login.

03

Claude Code or Codex

Claude Code ↗ · Codex ↗

Free download

Verticalmove GitHub Talent Scout

github-talent-scout-skill.zip · SKILL.md + README.md
  • Role decomposition and repo mapping
  • GitHub CLI and REST sourcing workflow
  • Evidence rubric and ranking
  • Rate-limit pacing and safety rules
  • Shortlist export with cited PRs
Download free AI skill One ZIP, about 7 KB. Unzip it and you'll find SKILL.md, the instruction file your agent reads, plus a short README. No email. No account. Read it before you run it.
Claude Codepersonal skill, available in every project
gh auth status                          # confirm you're logged in
unzip github-talent-scout-skill.zip
mkdir -p ~/.claude/skills
mv github-talent-scout ~/.claude/skills/

# then, inside Claude Code:
# /github-talent-scout  + paste your role spec

For one repo only, use .claude/skills/ in that project and commit it so your team gets it too.

Handing this to someone on your TA team? Step-by-step setup
  1. Create a free account at github.com/signup.
  2. Install GitHub CLI from cli.github.com. Choose the Mac or Windows installer.
  3. Open Terminal (Mac) or PowerShell (Windows). Type gh auth login, press Enter, and choose to log in with a web browser.
  4. Type gh api rate_limit. If you see your limits, the connection works.
  5. Install Claude Code or Codex using its official instructions. Some agent products require a paid plan.
  6. Unzip the skill and move the github-talent-scout folder into the skills folder shown above.
  7. No install option: unzip the download, open SKILL.md from the github-talent-scout folder, paste its contents into your assistant, and ask it to follow those instructions for this search. It works for one session only.
The Verticalmove perspective

Finding them is the easy part now.

We've run engineering searches since 1999. We use this same signal every day, and we're giving the playbook away because finding people is no longer the scarce part.

Here's what it doesn't solve. The engineer with 14 merged PRs to the project your platform depends on is on every other team's shortlist too. Their inbox is full. They aren't looking.

Getting a conversation takes a specific, credible reason to talk. Getting a hire takes trust, a real story about the work, and follow-through over weeks. That part is still the job.

Finding talent is getting easier. Engaging it is still the hard part.

Run it on your hardest open req. If your team builds a strong shortlist and can't turn it into conversations, we'd be glad to compare notes.

Copied to clipboard