← Back to Skills Marketplace
46
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install yihui-git-monitor
Description
通用 Git 项目监控工具。支持 GitHub、GitLab、Gitee 等所有 Git 平台。可以添加、删除、检查任意 Git 仓库的更新，自动拉取代码并生成变更摘要。
Usage Guidance
Do not install yet. Ask the publisher for the actual package contents and an install spec (what clawhub fetches), and inspect the helper.js and any install scripts before granting access. Confirm which binaries (git, node) are used and whether the skill will read ~/.openclaw/openclaw.json or any other files. If you must test it, run it in a sandbox or isolated account with no Feishu or other sensitive credentials set, and prefer providing a dedicated, limited-scope Feishu bot/token rather than using global credentials. If the publisher cannot provide code or a clear install manifest, treat the skill as untrusted.
Capability Analysis
Type: OpenClaw Skill
Name: yihui-git-monitor
Version: 1.0.0
The skill requests broad permissions to read sensitive environment variables and local configuration files (~/.openclaw/openclaw.json) containing Feishu/Lark credentials. While these are documented for notification purposes, the skill's core logic involves pulling remote Git repository content and executing a local script (helper.js, which is not provided in the bundle), creating a high-risk surface for credential exfiltration or indirect prompt injection from monitored repositories.
Capability Assessment
Purpose & Capability
The skill claims to monitor Git repos and push notifications to Feishu, which legitimately would require code (a helper script), access to git, and optionally Feishu credentials. However the registry entry lists no code files, no install spec, no required binaries (git/node), and no required env/config paths. Those omissions are inconsistent with the stated capability.
Instruction Scope
SKILL.md explicitly instructs running 'node helper.js' in ~/.openclaw/workspace/skills/git-monitor and describes cascading reads of FEISHU_* environment variables and the OpenClaw main config (~/.openclaw/openclaw.json). Those runtime actions involve reading local files and credentials and executing code — but there is no code or declared file access in the package metadata. The doc also promises pushing to the 'current chat window' without clearly specifying endpoints, granting broad discretion.
Install Mechanism
There is no install spec in the registry entry (instruction-only skill). That reduces on-disk risk from this package itself, but the SKILL.md refers to 'clawhub install git-monitor' and local helper scripts that are not present in the scanned bundle. Either the installer will fetch additional code at install time (not visible here) or the documentation is misleading — both are noteworthy.
Credentials
The README instructs the skill will read FEISHU_APP_ID / FEISHU_APP_SECRET / FEISHU_CHAT_ID and fall back to ~/.openclaw/openclaw.json. Yet the skill metadata declares no required environment variables or config paths. Reading an agent's main config file and optional Feishu secrets is sensitive and should be explicitly declared; the omission is disproportionate to what was declared.
Persistence & Privilege
always:false (default) and autonomous invocation allowed (default) are fine. However the skill's described behavior (scheduled checks, automatic pushes) implies persistent/background activity. Because the skill may read your OpenClaw config and env vars, you should be cautious about enabling scheduled/always-running behavior until the code and install process are reviewed.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install yihui-git-monitor - After installation, invoke the skill by name or use
/yihui-git-monitor - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is YiHui GIT MONITOR?
通用 Git 项目监控工具。支持 GitHub、GitLab、Gitee 等所有 Git 平台。可以添加、删除、检查任意 Git 仓库的更新，自动拉取代码并生成变更摘要。 It is an AI Agent Skill for Claude Code / OpenClaw, with 46 downloads so far.
How do I install YiHui GIT MONITOR?
Run "/install yihui-git-monitor" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is YiHui GIT MONITOR free?
Yes, YiHui GIT MONITOR is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does YiHui GIT MONITOR support?
YiHui GIT MONITOR is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created YiHui GIT MONITOR?
It is built and maintained by 辉哥 (@1yihui); the current version is v1.0.0.
More Skills