← 返回 Skills 市场

GitHub Trending Feed

Name: GitHub Trending Feed
Author: humor200

作者 humor200 · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

721

总下载

当前安装

版本数

在 OpenClaw 中安装

/install github-trending-feed

功能描述

获取 GitHub Trending 热门仓库列表。当用户要求查看 GitHub 热榜、每日 GitHub trending、推送 GitHub 热门项目时使用。支持可选语言过滤，返回结构化 JSON 由 agent 自行决定输出格式。

使用说明 (SKILL.md)

GitHub Trending 数据获取

工作流程

抓取 Trending 页面：获取 GitHub 热门仓库列表
获取仓库详情：对每个仓库调用 GitHub REST API 获取 description、stars、language
返回 JSON：agent 自行格式化为目标平台的消息

使用方法

基础用法

python3 ~/.openclaw/workspace/skills/github-trending/scripts/fetch_trending.py

语言过滤

python3 ~/.openclaw/workspace/skills/github-trending/scripts/fetch_trending.py python
python3 ~/.openclaw/workspace/skills/github-trending/scripts/fetch_trending.py javascript

输出格式

返回 JSON 数组，每个元素：

{
  "full_name": "owner/repo",
  "description": "仓库描述",
  "language": "Python",
  "stars": 12345,
  "url": "https://github.com/owner/repo"
}

Agent 使用建议

获取数据后，根据所在平台格式化输出：

飞书：

📊 **GitHub Trending · 今日热榜**
🔥 1. owner/repo - 描述 ⭐ 12345 | Python 🔗 https://github.com/owner/repo

Discord/Telegram：

📊 GitHub Trending 今日热榜
1. owner/repo - 描述 ⭐ 12345 | Python | https://github.com/owner/repo

控制台：

1. owner/repo (⭐ 12345 | Python)
   描述
   https://github.com/owner/repo

注意事项

GitHub API 有速率限制，高频使用建议配合缓存
脚本自动处理 API 错误，失败时会返回 fallback 数据
默认返回 9 个仓库，语言过滤时返回 10 个

安全使用建议

This skill appears coherent and low-risk, but review a few items before installing: - Functional bug: the SKILL.md examples for language filtering (e.g., 'python') do not match how the script builds the trending URL — the script sends the argument as a 'since' parameter. If you need language filtering, either update the script to request /trending/<language> or adjust the docs. - Network access: the script makes outbound requests to github.com and api.github.com. Ensure your environment allows that and be aware of GitHub API rate limits. If you plan high-frequency calls, modify the script to support a GITHUB_TOKEN via an environment variable and caching. - Code review: the full script is included (no hidden downloads). If you accept it, you can run it locally to validate output before granting the agent permission to invoke it. - Fallback list: the script contains a hard-coded fallback list of repo names used if scraping fails; inspect this list if you have policy concerns about displayed content. Overall the skill is internally consistent and does what it claims, aside from the documented language-filtering mismatch.

功能分析

Type: OpenClaw Skill Name: github-trending-feed Version: 1.0.0 The skill bundle is a legitimate utility for fetching GitHub trending repositories. The Python script (scripts/fetch_trending.py) uses standard libraries to scrape the GitHub trending page and query the GitHub API for repository details, with no evidence of data exfiltration, malicious execution, or prompt injection.

能力评估

ℹ Purpose & Capability

The skill's name and description match its behavior: it scrapes https://github.com/trending and calls the GitHub REST API for repo details. One mismatch: SKILL.md advertises language filtering (examples: 'python', 'javascript'), but the script treats the single CLI argument as the 'since' query parameter (e.g., daily/weekly/monthly) rather than a language path; this is a functional bug, not a security issue.

ℹ Instruction Scope

Runtime instructions only run the included Python script from the skill workspace and describe formatting outputs for various platforms. The script only performs network requests to github.com and api.github.com and prints JSON to stdout. It does not read arbitrary files, access environment variables, or send data to third-party endpoints. The noted mismatch between advertised language filtering and the implemented URL construction is a scope/accuracy issue in instructions.

✓ Install Mechanism

No install spec; this is an instruction-plus-script skill with no external downloads or package installs. Nothing is written to disk by an installer; the only code is the included Python script.

✓ Credentials

The skill requires no environment variables or credentials. It uses unauthenticated GitHub API calls which are consistent with the described purpose but subject to rate limits; SKILL.md correctly suggests caching or using an authenticated approach for high-frequency use.

✓ Persistence & Privilege

The skill does not request permanent presence (always=false) and does not modify other skills or system-wide settings. It prints results to stdout and does not persist credentials or change agent config.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install github-trending-feed
安装完成后，直接呼叫该 Skill 的名称或使用 /github-trending-feed 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: fetch GitHub trending repos with structured JSON output, platform-agnostic

元数据

Slug github-trending-feed

版本 1.0.0

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 1

常见问题