← 返回 Skills 市场

9527 Github Trending

Name: 9527 Github Trending
Author: 863king

作者 863king · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

193

总下载

当前安装

版本数

在 OpenClaw 中安装

/install 9527-github-trending

功能描述

每日自动获取 GitHub Trending 热门项目，推送通知。支持自定义语言、时间范围、推送渠道（Telegram/钉钉/企业微信）。零成本运行。

使用说明 (SKILL.md)

GitHub Trending 每日推送

自动获取 GitHub Trending 热门项目，推送到你的通知渠道。

功能

每日自动获取 GitHub Trending
支持过滤编程语言
支持多种推送渠道（Telegram、钉钉、企业微信）
零成本运行
可设置为 Cron 定时任务

快速开始

# 获取今日热门项目
python3 trending.py

# 只看 Python 项目
python3 trending.py --language python

# 推送到 Telegram
python3 trending.py --telegram --token YOUR_BOT_TOKEN --chat_id YOUR_CHAT_ID

# 推送到钉钉
python3 trending.py --dingtalk --webhook YOUR_WEBHOOK_URL

Cron 定时任务

# 每天 9:00 推送
0 9 * * * python3 /path/to/trending.py --telegram --token xxx --chat_id xxx

收入模式

上架 ClawHub 免费分享
提供定制服务（付费）
接受 GitHub Sponsors

安全使用建议

This skill appears to do what it says, but review and run safely: 1) Inspect trending.py yourself (it performs HTTP requests to github.com and to Telegram/webhook URLs you provide). 2) Do NOT place bot tokens or webhook URLs directly in a public crontab or on the command line (they appear in process lists and some system crontabs); instead use environment variables or a protected config file with restrictive permissions. 3) Verify any webhook endpoints you use are trustworthy and rotate tokens if accidentally exposed. 4) Be aware the script scrapes HTML with regex (fragile) and may break or be rate-limited; consider using the GitHub API or adding retry/backoff if you run it frequently. 5) Run it in a limited user account or isolated environment if you want extra safety.

功能分析

Type: OpenClaw Skill Name: 9527-github-trending Version: 1.0.0 The skill bundle is a legitimate utility for fetching GitHub Trending projects and sending notifications via Telegram, DingTalk, or Enterprise WeChat. The Python script (trending.py) uses standard libraries to scrape GitHub and interact with official notification APIs using user-provided credentials, with no evidence of data exfiltration, malicious execution, or prompt injection.

能力评估

✓ Purpose & Capability

The repository, SKILL.md examples, and trending.py implement exactly the advertised functionality (fetch GitHub Trending, format results, send via Telegram/webhook). No unrelated binaries, env vars, or services are requested.

ℹ Instruction Scope

SKILL.md only instructs running trending.py and setting up a cron job. One security-relevant note: examples show passing tokens/webhooks on the command line and in crontab, which can expose secrets via process lists or crontab visibility. The instructions do not tell the agent to read unrelated files or secrets.

✓ Install Mechanism

No install spec is provided (instruction-only skill with an included .py). Nothing is downloaded or written by an installer; risk from installation is minimal.

ℹ Credentials

The skill requires no declared environment variables; it accepts tokens/webhooks as runtime arguments. That is proportional to its purpose, but passing secrets on command line or crontab is insecure — better to use protected env vars or a config file with restricted permissions.

✓ Persistence & Privilege

The skill does not request persistent presence (always:false) and does not modify other skills or system settings. It runs on demand or via user-configured cron.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install 9527-github-trending
安装完成后，直接呼叫该 Skill 的名称或使用 /9527-github-trending 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of 9527-github-trending. - Automatically fetches GitHub Trending projects daily. - Supports filtering by programming language. - Push notifications available for Telegram, DingTalk, and WeCom. - Zero-cost operation and easy setup with Cron scheduling. - Simple CLI usage for fetching and sending trending project lists.

元数据

Slug 9527-github-trending

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题