Verticalmove GitHub Talent Scout
- Role decomposition and repo mapping
- GitHub CLI and REST sourcing workflow
- Evidence rubric and ranking
- Rate-limit pacing and safety rules
- Shortlist export with cited PRs
Enter the passphrase to continue.
/ GitHub Talent Scout
Download free AI skill
GitHub Talent Scout is a skill file your coding agent runs against GitHub's public REST API. Give it a role. It maps the open-source projects that matter, pulls merged pull requests and code reviews, and returns a ranked shortlist. Every claim links to the code behind it.
Plain markdown. Runs locally under your own GitHub token. Nothing goes anywhere except GitHub and your model provider.
Keyword search finds people who wrote "Kubernetes" on a profile. It can't tell you who fixed the scheduler bug you hit last quarter.
Public GitHub history can. A merged pull request to a serious project has passed review by maintainers who had no reason to be generous. Review comments show how someone reasons about other people's code. Sustained contribution shows judgment over time, not a weekend.
This doesn't replace interviews. It changes who gets one.
Right column is an illustrative example, not a real engineer.
GitHub's REST API is the same documented interface developers use to build integrations. For public data it returns repositories, pull requests, code reviews, and public profile fields as structured JSON. It's free, and you can verify every claim on this page from GitHub's own documentation.
There's no developer program to apply for and no API key to request. Any GitHub account can authenticate. Authenticating raises your limits from 60 to 5,000 requests an hour.
GitHub Docs: Getting started with the REST API ↗Run gh auth login and approve in your browser. The CLI stores a token for you. No token to copy, paste, or rotate by hand.
Prefer explicit control? Create a fine-grained token with read-only access to public repositories. It can't write anything and you can revoke it anytime.
GitHub Docs: Managing personal access tokens ↗gh api rate_limit --jq '.resources | {core, search, code_search}'
GitHub publishes no daily search quota. Limits are enforced per minute and per hour, secondary limits also apply, and GitHub can change any of them. In practice, search is what paces a run, not the 5,000-an-hour core limit.
gh.The skill doesn't ship a scraper or a hidden service. It's an instruction file. It tells your agent what to query, in what order, what to read, and how to score what it finds. Your agent runs standard GitHub CLI and REST calls under your authenticated account.
# 1. Map the ecosystem: which repos matter for this role gh search repos "query engine" --language=rust --sort=stars --limit 20 # 2. Pull merged work, not activity gh search prs --repo apache/datafusion --merged \ --merged-at ">2025-04-01" --limit 100 --json author,title,url,closedAt # 3. Read the evidence: what changed, who reviewed it gh pr view <number> --repo apache/datafusion \ --json files,additions,deletions,reviews # 4. Public profile context only gh api users/<login> --jq '{login,name,company,blog,location}'
Turns the JD into capabilities, then into projects, modules, and file paths where that work actually happens.
Finds adjacent projects you'd miss. Drops forks, archived repos, and anything without active review.
Merged PRs in a time window, files touched, reviews given and received. Search calls are paced to stay inside limits.
Ranks against the rubric below. Every rating carries the PR links that justify it, plus what still needs verifying.
Green squares are easy to farm. The skill weights work that another engineer had to review and accept, and discounts activity nobody checked.
Built to not invent things. The skill instructs the agent to state only what the data shows. No guessing seniority, employer, or location beyond the public profile. Gaps are listed as open questions, not filled in.
Vague prompts get vague shortlists. Name the repos you know, the modules that matter, a time window, exclusions, and the output you want. Pick an example, copy it, and edit the specifics.
The output is a table your hiring team can audit. Each rating carries the PRs that justify it, the volume behind it, and what the data can't tell you.
| Contributor | Strongest evidence | Volume | Fit | Verify before outreach |
|---|---|---|---|---|
| @sample-dev-a | query-engine#0000 Join reordering in the cost-based optimizer query-engine#0000 Spill-to-disk for hash aggregate |
14 merged · 52 reviews active 21/24 mo |
StrongCore planner work, accepted by maintainers | Current employer, whether contributing is part of their job |
| @sample-dev-b | columnar-format#0000 SIMD kernels for string comparison | 6 merged · 4 reviews active 7/24 mo |
ModerateDeep but narrow. Little review activity | Breadth beyond kernels, scope of ownership |
| @sample-dev-c | embedded-olap#0000 Parallel Parquet reader RFC thread on morsel-driven scheduling |
9 merged · 31 reviews active 15/24 mo |
StrongDesign input plus merged implementation | Location, work authorization, interest |
Evidence, not a verdict. Public contributions don't show private work, job-search intent, availability, or compensation. Most strong engineers have little public code. Treat this as one sourcing channel with high precision and limited coverage.
The API gives you the data. It doesn't give you the whole market, and it comes with rules.
Open-source work concentrates in infrastructure, data, developer tools, and ML systems. For product engineering or regulated domains, public signal is thin. The skill says so instead of padding the list.
Many top contributors are paid by a vendor to work on that project. That's useful context, and it usually means a harder recruit. The shortlist flags it where the profile shows it.
GitHub's Acceptable Use Policies prohibit using information from the platform, including data pulled through the API, to send unsolicited emails or to sell personal information to recruiters. The skill is built for research, not list-building.
Checked against GitHub's documentation in October 2026.
gh.You need three things: a GitHub account, an authenticated GitHub CLI, and a coding agent that supports skills.
gh auth status # confirm you're logged in unzip github-talent-scout-skill.zip mkdir -p ~/.claude/skills mv github-talent-scout ~/.claude/skills/ # then, inside Claude Code: # /github-talent-scout + paste your role spec
For one repo only, use .claude/skills/ in that project and commit it so your team gets it too.
gh auth status # confirm you're logged in unzip github-talent-scout-skill.zip mkdir -p ~/.codex/skills mv github-talent-scout ~/.codex/skills/ # then, inside Codex: # $github-talent-scout + paste your role spec
Codex also reads repo-level skills from .codex/skills/. Check the current Codex skills docs if your version behaves differently.
gh auth login, press Enter, and choose to log in with a web browser.gh api rate_limit. If you see your limits, the connection works.github-talent-scout folder into the skills folder shown above.SKILL.md from the github-talent-scout folder, paste its contents into your assistant, and ask it to follow those instructions for this search. It works for one session only.We've run engineering searches since 1999. We use this same signal every day, and we're giving the playbook away because finding people is no longer the scarce part.
Here's what it doesn't solve. The engineer with 14 merged PRs to the project your platform depends on is on every other team's shortlist too. Their inbox is full. They aren't looking.
Getting a conversation takes a specific, credible reason to talk. Getting a hire takes trust, a real story about the work, and follow-through over weeks. That part is still the job.
Run it on your hardest open req. If your team builds a strong shortlist and can't turn it into conversations, we'd be glad to compare notes.