← 返回 Skills 市场

Github Trending Daily

Name: Github Trending Daily
Author: jiangzhiyu

作者 johnson · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

433

总下载

当前安装

版本数

在 OpenClaw 中安装

/install github-trending-daily

功能描述

定时获取并推送每日、每周或每月 GitHub Trending 热门项目至钉钉群，支持测试和只获取模式。

使用说明 (SKILL.md)

github-trending-daily - 每日 GitHub Trending 推送

每天定时获取 GitHub Trending 热门项目并推送到钉钉群。

使用方法

基础用法

github-trending-daily              # 获取今日热门并推送
github-trending-daily --weekly     # 获取本周热门
github-trending-daily --monthly    # 获取本月热门
github-trending-daily --dry-run    # 测试模式（预览消息）

示例

# 推送今日热门
github-trending-daily

# 推送本周热门
github-trending-daily --weekly

# 测试模式（不实际发送）
github-trending-daily --dry-run

# 只获取不推送
github-trending-daily --no-push

定时任务配置

工作日每天早上 9 点推送

# 编辑 crontab
crontab -e

# 添加以下行
0 9 * * 1-5 /usr/bin/python3 ~/.openclaw/workspace/skills/github-trending-daily/github-trending-daily.py

每天早上 9 点推送（包括周末）

0 9 * * * /usr/bin/python3 ~/.openclaw/workspace/skills/github-trending-daily/github-trending-daily.py

配置信息

钉钉 Webhook: 已配置
安全关键词: AI 推送
推送时间: 默认每天早上 9 点（可自定义）
消息格式: Markdown

消息格式

# AI 推送

## 🔥 GitHub Trending 今日 (2026-02-25)

🥇 **huggingface/skills** (Python) +1,206⭐
   _Hugging Face 官方技能库_
   ⭐ 5,612 | [GitHub](https://github.com/huggingface/skills)

...

---
_📊 数据来源：GitHub Trending_
_🤖 自动推送 by 小牛马_

故障排除

推送失败: 检查钉钉机器人 Webhook 是否有效
无数据: 检查网络连接或 GitHub 访问状态
定时任务未执行: 检查 cron 服务状态 sudo systemctl status cron

相关技能

dingtalk-push: 钉钉推送基础技能
github-trending: GitHub Trending 查询技能

安全使用建议

Do not install this skill as-is if you expect notifications to go to your DingTalk group. The script contains a hard-coded DingTalk webhook URL (an access token) which will cause all pushes to go to that webhook unless you edit the code. Recommended actions before use: 1) Inspect and replace DINGTALK_WEBHOOK in github-trending-daily.py with a webhook you control, or modify the script to read the webhook from an environment variable/config file. 2) If the embedded webhook is yours, consider rotating it (create a new webhook) and use the new token stored in a secure env var. 3) Review the script for any additional endpoints (it only calls GitHub and the DingTalk webhook). 4) If you cannot or do not want to edit the file, avoid installing — the author-controlled webhook could receive unexpected data. 5) Prefer skills that require you to provide credentials explicitly (via env or configuration) rather than embedding them in code.

功能分析

Type: OpenClaw Skill Name: github-trending-daily Version: 1.0.0 The skill 'github-trending-daily' is designed to fetch GitHub trending projects and push them to a DingTalk group. The code (`github-trending-daily.py`) correctly implements this functionality using standard Python libraries for web scraping and API interaction. The `SKILL.md` provides clear instructions for usage and optional cron job setup, which aligns with the skill's stated purpose of daily pushes and does not contain any prompt injection attempts. While the DingTalk webhook token is hardcoded in the script, which is a minor security vulnerability (token exposure), it does not indicate malicious intent to exfiltrate user data or compromise the system. No evidence of malicious execution, unauthorized data exfiltration, or persistence mechanisms installed by the script itself was found.

能力评估

ℹ Purpose & Capability

The name/description (push GitHub Trending to DingTalk) matches the code and SKILL.md: the script fetches trending pages, formats Markdown, and posts to a DingTalk webhook. However, the skill includes a specific hard-coded webhook URL inside the code rather than requiring the user to supply their own, which is unexpected for a push-notification integration.

⚠ Instruction Scope

SKILL.md simply instructs how to run the script and add a cron job and states '钉钉 Webhook: 已配置' without telling the user to configure their own webhook or pointing how to change it. The runtime instructions and code will send messages to the embedded webhook by default; the skill does not read or transmit any other local files or secrets, but the silent use of a third-party webhook is scope creep relative to the documentation.

✓ Install Mechanism

There is no install spec; this is an instruction-only skill with an included Python script. Nothing is downloaded or written at install time, which reduces install-time risk.

⚠ Credentials

The skill requests no environment variables, but embeds a full DingTalk webhook URL (including an access_token-like value) in plaintext. A well-scoped push skill would require the operator to provide their own webhook (env var or config file). Embedding someone else's webhook is disproportionate and could cause unexpected outbound posting or leak data to the webhook owner.

✓ Persistence & Privilege

The skill does not request 'always: true', does not modify other skills or system settings, and runs only when invoked or via user-installed cron. There is no evidence of privilege escalation or permanent platform-wide changes.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install github-trending-daily
安装完成后，直接呼叫该 Skill 的名称或使用 /github-trending-daily 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of github-trending-daily - Automatically fetches daily, weekly, or monthly GitHub Trending projects - Pushes trending lists to a specified DingTalk group - Supports dry-run and no-push modes for testing and customization - Provides sample crontab configurations for scheduled delivery - Customizable message format using Markdown - Includes troubleshooting tips and related skills references

元数据

Slug github-trending-daily

版本 1.0.0

许可证 —

累计安装 2

当前安装数 2

历史版本数 1

常见问题