GitHub Trending Feed

获取 GitHub Trending 热门仓库列表。当用户要求查看 GitHub 热榜、每日 GitHub trending、推送 GitHub 热门项目时使用。支持可选语言过滤，返回结构化 JSON 由 agent 自行决定输出格式。

Security Scan

The skill's code and instructions are consistent with a GitHub trending feed: it scrapes GitHub's trending page and queries the GitHub API, requests no secrets or installs, and does not perform unexpected I/O or exfiltration.

Purpose & Capability

The skill's name and description match its behavior: it scrapes https://github.com/trending and calls the GitHub REST API for repo details. One mismatch: SKILL.md advertises language filtering (examples: 'python', 'javascript'), but the script treats the single CLI argument as the 'since' query parameter (e.g., daily/weekly/monthly) rather than a language path; this is a functional bug, not a security issue.

Instruction Scope

Runtime instructions only run the included Python script from the skill workspace and describe formatting outputs for various platforms. The script only performs network requests to github.com and api.github.com and prints JSON to stdout. It does not read arbitrary files, access environment variables, or send data to third-party endpoints. The noted mismatch between advertised language filtering and the implemented URL construction is a scope/accuracy issue in instructions.

Install Mechanism

No install spec; this is an instruction-plus-script skill with no external downloads or package installs. Nothing is written to disk by an installer; the only code is the included Python script.

Credentials

The skill requires no environment variables or credentials. It uses unauthenticated GitHub API calls which are consistent with the described purpose but subject to rate limits; SKILL.md correctly suggests caching or using an authenticated approach for high-frequency use.

Persistence & Privilege

The skill does not request permanent presence (always=false) and does not modify other skills or system-wide settings. It prints results to stdout and does not persist credentials or change agent config.

Assessment

This skill appears coherent and low-risk, but review a few items before installing: - Functional bug: the SKILL.md examples for language filtering (e.g., 'python') do not match how the script builds the trending URL — the script sends the argument as a 'since' parameter. If you need language filtering, either update the script to request /trending/<language> or adjust the docs. - Network access: the script makes outbound requests to github.com and api.github.com. Ensure your environment allows that and be aware of GitHub API rate limits. If you plan high-frequency calls, modify the script to support a GITHUB_TOKEN via an environment variable and caching. - Code review: the full script is included (no hidden downloads). If you accept it, you can run it locally to validate output before granting the agent permission to invoke it. - Fallback list: the script contains a hard-coded fallback list of repo names used if scraping fails; inspect this list if you have policy concerns about displayed content. Overall the skill is internally consistent and does what it claims, aside from the documented language-filtering mismatch.

GitHub Trending 数据获取

工作流程

1. 抓取 Trending 页面：获取 GitHub 热门仓库列表
2. 获取仓库详情：对每个仓库调用 GitHub REST API 获取 description、stars、language
3. 返回 JSON：agent 自行格式化为目标平台的消息

使用方法

基础用法

python3 ~/.openclaw/workspace/skills/github-trending/scripts/fetch_trending.py

语言过滤

python3 ~/.openclaw/workspace/skills/github-trending/scripts/fetch_trending.py python
python3 ~/.openclaw/workspace/skills/github-trending/scripts/fetch_trending.py javascript

输出格式

返回 JSON 数组，每个元素：

{
  "full_name": "owner/repo",
  "description": "仓库描述",
  "language": "Python",
  "stars": 12345,
  "url": "https://github.com/owner/repo"
}

Agent 使用建议

获取数据后，根据所在平台格式化输出：

飞书：

📊 **GitHub Trending · 今日热榜**
🔥 1. owner/repo - 描述 ⭐ 12345 | Python 🔗 https://github.com/owner/repo

Discord/Telegram：

📊 GitHub Trending 今日热榜
1. owner/repo - 描述 ⭐ 12345 | Python | https://github.com/owner/repo

控制台：

1. owner/repo (⭐ 12345 | Python)
   描述
   https://github.com/owner/repo

注意事项

• GitHub API 有速率限制，高频使用建议配合缓存
• 脚本自动处理 API 错误，失败时会返回 fallback 数据
• 默认返回 9 个仓库，语言过滤时返回 10 个