← Back to Skills Marketplace
gushenjie

Git Monitor

by kinggu · GitHub ↗ · v1.1.1 · MIT-0
cross-platform ⚠ suspicious
365
Downloads
0
Stars
1
Active Installs
4
Versions
Install in OpenClaw
/install git-monitor
Description
通用 Git 项目监控工具。支持 GitHub、GitLab、Gitee 等所有 Git 平台。可以添加、删除、检查任意 Git 仓库的更新,自动拉取代码并生成变更摘要。当用户询问"监控项目"、"检查更新"、"添加仓库"、"代码有什么变化"、"拉取最新代码"、"仓库更新通知"、"自动同步代码"、"追踪项目变更"时...
README (SKILL.md)

Git 项目监控技能

自动监控 Git 项目更新(支持 GitHub、GitLab、Gitee 等所有 Git 平台),拉取最新代码并生成变更摘要。

🚀 快速开始(只需3步)

第1步:安装技能

clawhub install git-monitor

第2步:告诉我你要监控什么

直接在对话中说:

"监控 GitHub 项目 anthropics/skills"

"监控 https://gitee.com/mindspore/mindspore"

第3步:开启自动推送(可选)

说:"设置定时检查,每6小时一次"

然后就完事了!有代码更新会自动推送到你的飞书/当前聊天窗口。


📖 完整使用指南

添加监控仓库

监控 GitHub 项目 anthropics/skills
监控 https://github.com/openai/openai-python
监控 GitLab 项目 gitlab-org/gitlab
监控 Gitee 项目 openharmony/docs

查看监控列表

查看监控列表
列出所有监控的仓库

手动检查更新

检查所有更新
检查 anthropics/skills 的更新

删除监控

删除监控 anthropics/skills

开启/修改定时检查

设置定时检查,每1小时一次
关闭定时检查

⚙️ 飞书通知配置(0配置,开箱即用)

✅ 推荐:OpenClaw 主配置(无需任何操作)

如果你的 OpenClaw 已经配置了飞书机器人,自动读取,无需任何操作

技能会级联读取飞书凭证,优先级:

  1. 环境变量 FEISHU_APP_ID / FEISHU_APP_SECRET / FEISHU_CHAT_ID
  2. OpenClaw 主配置 ~/.openclaw/openclaw.json 中的飞书配置
  3. 以上都没有 → 跳过飞书推送(不影响 Git 监控功能)

可选:使用自己的飞书机器人

# 环境变量方式
export FEISHU_APP_ID="cli_xxx"
export FEISHU_APP_SECRET="xxx"
export FEISHU_CHAT_ID="ou_xxx"

或在 OpenClaw 配置中添加:

"feishu": {
  "appId": "cli_xxx",
  "appSecret": "xxx",
  "chatId": "ou_xxx"
}

获取飞书配置

  1. 访问 https://open.feishu.cn/ 创建企业自建应用
  2. 获取 App ID 和 App Secret
  3. 开启权限:im:chat:read:chat_idim:message:send_as_bot
  4. 将应用添加到群聊,获取群聊 ID

💻 命令行用法

cd ~/.openclaw/workspace/skills/git-monitor

# 添加仓库
node helper.js add https://github.com/owner/repo

# 查看列表
node helper.js list

# 检查更新
node helper.js check

# 删除仓库
node helper.js remove owner/repo
Usage Guidance
This skill appears to do what it says (clone and monitor Git repos, produce diffs, and send Feishu notifications). Before installing: - Confirm you want the skill to clone repositories into ~/.openclaw/workspace/repos (it will create and persist local copies). - Review ~/.openclaw/openclaw.json contents because the skill will read it to obtain Feishu credentials (and it will also read FEISHU_* env vars if present). - Inspect the full helper.js (the provided excerpt is truncated) to verify how "定时检查" (scheduled checks) are implemented — check whether it creates cron jobs, background services, or other persistent schedulers. - Ensure you trust any repositories you add (they are cloned and may execute git hooks locally if you run them). If you are unsure, run the skill in a sandboxed environment or inspect and run the scripts manually before granting it access to your primary environment.
Capability Analysis
Type: OpenClaw Skill Name: git-monitor Version: 1.1.1 The skill exhibits high-risk patterns, primarily a shell injection vulnerability in `helper.js` where repository URLs and branch names are interpolated directly into `execSync` commands without sanitization. It also programmatically accesses sensitive credentials (Feishu App IDs/Secrets) from the global `~/.openclaw/openclaw.json` file and environment variables to send data to external Feishu API endpoints (`open.feishu.cn`). While these actions support the stated Git monitoring and notification features, the lack of input validation and the broad access to system configuration files present a significant security risk.
Capability Assessment
Purpose & Capability
Name/description (Git project monitor) align with actual behavior: helper.js and monitor.sh perform git clone/fetch/reset/log/diff and generate summaries, and send notifications to Feishu. Actions (cloning repos, checking updates, producing diffs) are appropriate for a repo monitoring tool.
Instruction Scope
SKILL.md instructs use for monitoring/scheduling and the helper reads environment vars and the OpenClaw main config (~/.openclaw/openclaw.json) to obtain Feishu credentials. Reading the OpenClaw config and environment is reasonable for notification features, but SKILL.md also promises scheduled checks — the mechanism for scheduling is not visible in the provided excerpts (helper.js truncated), so it's unclear whether scheduling modifies system cron/tasks or runs only via manual invocation.
Install Mechanism
No external install spec/remote download is present (instruction-only install expected). The package contains local JS and shell scripts; there are no remote URLs or archives being fetched by an installer. Risk from install mechanism is low.
Credentials
The skill declares no required env vars but will optionally read FEISHU_APP_ID / FEISHU_APP_SECRET / FEISHU_CHAT_ID and will try to read ~/.openclaw/openclaw.json to cascade Feishu config. That is proportionate to its notification feature, but it means the skill can access configuration files and credentials stored in your OpenClaw profile — users should be aware and confirm those configs do not contain unrelated sensitive tokens.
Persistence & Privilege
always:false and normal agent invocation; the skill writes config.json in its skill directory and clones repositories under ~/.openclaw/workspace/repos by design. Those local clones may consume disk and persist indefinitely. The provided files do not show the scheduling implementation; if scheduling writes cron entries or system-wide tasks, that would raise privilege concerns — currently not shown, so review full helper.js for any task-scheduling side effects.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install git-monitor
  3. After installation, invoke the skill by name or use /git-monitor
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.1
修复跨平台兼容性:Windows 支持(os.homedir 替代 process.env.HOME,纯 Node.js git 命令替代 bash 脚本)
v1.1.0
安全修复:移除凭证,添加.clawhubignore;零配置自动读取OpenClaw飞书配置
v1.0.1
- 移除不再需要的测试文件 test-feishu.js。 - 无其他功能变更。
v1.0.0
- 首个版本发布,提供通用 Git 项目监控与更新摘要工具。 - 支持 GitHub、GitLab、Gitee 及所有 Git 平台的仓库监控、添加、删除与检查更新。 - 自动拉取代码,分析 commit 和代码 diff,生成结构化更新摘要。 - 更新变更可通过 Feishu 推送通知。 - 配置支持多仓库与定时任务。 - 附带常见问题与故障排查建议。
Metadata
Slug git-monitor
Version 1.1.1
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 4
Frequently Asked Questions

What is Git Monitor?

通用 Git 项目监控工具。支持 GitHub、GitLab、Gitee 等所有 Git 平台。可以添加、删除、检查任意 Git 仓库的更新,自动拉取代码并生成变更摘要。当用户询问"监控项目"、"检查更新"、"添加仓库"、"代码有什么变化"、"拉取最新代码"、"仓库更新通知"、"自动同步代码"、"追踪项目变更"时... It is an AI Agent Skill for Claude Code / OpenClaw, with 365 downloads so far.

How do I install Git Monitor?

Run "/install git-monitor" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Git Monitor free?

Yes, Git Monitor is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Git Monitor support?

Git Monitor is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Git Monitor?

It is built and maintained by kinggu (@gushenjie); the current version is v1.1.1.

💬 Comments