← 返回 Skills 市场

GitHub 项目分析助手

Name: GitHub 项目分析助手
Author: antonia-sz

作者 antonia huang · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

1194

总下载

当前安装

版本数

在 OpenClaw 中安装

/install github-analyzer

功能描述

输入项目想法或 GitHub 链接，自动搜索相关开源项目，生成结构化分析报告（技术栈/优缺点/评分），并可下载评分最高的前3名代码包。支持意图搜索和直链分析两种模式。

使用说明 (SKILL.md)

GitHub 项目分析助手 🔍

你能做什么

模式一：意图搜索

"我想做一个 XXX 项目，帮我找找 GitHub 上有没有相关开源项目"

模式二：直链分析

"帮我分析这几个项目：https://github.com/xxx/yyy https://github.com/aaa/bbb"

模式三：对比分析

"帮我对比这几个项目，哪个更适合我的需求"

工作流程

模式一：意图搜索模式

解析用户描述，提取 2-4 个核心关键词
调用 GitHub Search API 搜索相关仓库（按 stars 降序，取 Top 10）
过滤：排除 fork、归档、1年内未更新、stars \x3C 50 的项目
对每个项目调用 GitHub API 获取详情
AI 分析生成报告
询问是否需要下载代码包

模式二：直链分析模式

提取 URL 中的 owner/repo
调用 GitHub API 获取仓库详情、README、语言统计
AI 分析生成报告
询问是否需要下载代码包

报告格式

每个项目输出：

## [项目名](链接)

> 一句话描述

| 维度 | 详情 |
|------|------|
| ⭐ Stars | 12,345 |
| 🍴 Forks | 1,234 |
| 🔤 语言 | Python / TypeScript |
| 📅 最近更新 | 2024-01-15 |
| 📜 License | MIT |

### 核心功能
- 功能点1
- 功能点2
- 功能点3

### 优点 ✅
- ...

### 缺点 / 注意事项 ⚠️
- ...

### 适用场景
...

### 综合评分：8.5 / 10
评分依据：活跃度高（★★★★）、文档完善（★★★★）、社区活跃（★★★）、上手难度低（★★★★）

多个项目后附对比表格：

| 项目 | Stars | 语言 | 活跃度 | 文档 | 上手难度 | 综合分 |
|------|-------|------|--------|------|---------|--------|

下载功能

分析完成后询问用户是否下载：

"需要下载评分最高的前3名代码包吗？"
用户确认后，执行 python3 SKILL_DIR/scripts/download_repos.py \x3Crepo1> \x3Crepo2> \x3Crepo3>
下载到 ~/Downloads/github-analyzer/ 目录
打包为 zip，告知文件路径

工具调用

# 搜索 GitHub
exec: python3 SKILL_DIR/scripts/search_github.py "\x3Cquery>" [--limit 10]

# 分析单个仓库
exec: python3 SKILL_DIR/scripts/analyze_repo.py "\x3Cowner/repo>"

# 批量下载
exec: python3 SKILL_DIR/scripts/download_repos.py "\x3Cowner/repo1>" "\x3Cowner/repo2>" ...

注意事项

GitHub API 未认证时限速 60次/小时，认证后 5000次/小时
如有 GITHUB_TOKEN 环境变量则自动使用
README 超长时只取前 3000 字符分析
项目极少时（\x3C3个）告知用户并说明可能原因

安全使用建议

The skill appears to do what it says (search GitHub, analyze repos, download zips). Before installing: 1) Note the developer/source is unknown and there's no homepage — consider trusting the author. 2) The scripts will use GITHUB_TOKEN if present but the skill metadata doesn't declare it — if you provide a token, prefer one with minimal scopes (a public read-only token is enough); do not expose a token with broad privileges. 3) Downloads are saved to ~/Downloads/github-analyzer/ and will store arbitrary repository code; consider running the downloads in an isolated environment if you are concerned. 4) Ask the publisher to add GITHUB_TOKEN to the skill metadata (requires.env) or explicitly document its use to remove the inconsistency. Overall the skill is coherent but this undisclosed env-var use is a noteworthy mismatch.

功能分析

Type: OpenClaw Skill Name: github-analyzer Version: 1.0.0 The github-analyzer skill bundle is a legitimate tool for searching and analyzing GitHub repositories. It uses Python's standard library to interact with the GitHub API and provides functionality to download repository ZIP files to a designated local directory (~/Downloads/github-analyzer), as explicitly stated in SKILL.md and README.md. No evidence of malicious intent, data exfiltration, or unauthorized command execution was found in the scripts (analyze_repo.py, download_repos.py, search_github.py).

能力评估

✓ Purpose & Capability

Name/description align with included scripts (search_github.py, analyze_repo.py, download_repos.py). All required functionality (search, analyze, download) is implemented and there are no unrelated binaries or unexpected services referenced.

✓ Instruction Scope

SKILL.md instructions are narrowly scoped to calling the included Python scripts which use the GitHub API and optionally download repository zip files to ~/Downloads/github-analyzer/. The agent will run network calls to api.github.com and github.com and will write files to the user's Downloads directory — behavior that matches the stated feature set.

✓ Install Mechanism

No install spec; this is instruction-plus-scripts only. The included Python code uses only the standard library (urllib, json, etc.), so there is no additional install/download step that would pull arbitrary third-party code.

⚠ Credentials

SKILL.md and the scripts optionally use a GITHUB_TOKEN from the environment to increase rate limits, but the skill metadata declares no required environment variables. The runtime code reads GITHUB_TOKEN (and sends an Authorization header even when empty), which is an undeclared credential access and should be declared explicitly. The skill also creates/writes files under ~/Downloads/github-analyzer/, which is consistent with its purpose but is a filesystem write that users should be aware of.

✓ Persistence & Privilege

The skill is not always-enabled, does not request system-wide configuration changes, and does not modify other skills. It runs on-demand and writes only to its own download directory.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install github-analyzer
安装完成后，直接呼叫该 Skill 的名称或使用 /github-analyzer 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

初版发布

元数据

Slug github-analyzer

版本 1.0.0

许可证 MIT-0

累计安装 12

当前安装数 11

历史版本数 1

常见问题