YiHui GIT MONITOR

通用 Git 项目监控工具。支持 GitHub、GitLab、Gitee 等所有 Git 平台。可以添加、删除、检查任意 Git 仓库的更新，自动拉取代码并生成变更摘要。

Security Scan

The skill's instructions reference running a local Node helper, using git and Feishu credentials, and reading your OpenClaw config, but the package declares no code, no install, and no required env/config — these mismatches are concerning and deserve inspection before installation.

Purpose & Capability

The skill claims to monitor Git repos and push notifications to Feishu, which legitimately would require code (a helper script), access to git, and optionally Feishu credentials. However the registry entry lists no code files, no install spec, no required binaries (git/node), and no required env/config paths. Those omissions are inconsistent with the stated capability.

Instruction Scope

SKILL.md explicitly instructs running 'node helper.js' in ~/.openclaw/workspace/skills/git-monitor and describes cascading reads of FEISHU_* environment variables and the OpenClaw main config (~/.openclaw/openclaw.json). Those runtime actions involve reading local files and credentials and executing code — but there is no code or declared file access in the package metadata. The doc also promises pushing to the 'current chat window' without clearly specifying endpoints, granting broad discretion.

Install Mechanism

There is no install spec in the registry entry (instruction-only skill). That reduces on-disk risk from this package itself, but the SKILL.md refers to 'clawhub install git-monitor' and local helper scripts that are not present in the scanned bundle. Either the installer will fetch additional code at install time (not visible here) or the documentation is misleading — both are noteworthy.

Credentials

The README instructs the skill will read FEISHU_APP_ID / FEISHU_APP_SECRET / FEISHU_CHAT_ID and fall back to ~/.openclaw/openclaw.json. Yet the skill metadata declares no required environment variables or config paths. Reading an agent's main config file and optional Feishu secrets is sensitive and should be explicitly declared; the omission is disproportionate to what was declared.

Persistence & Privilege

always:false (default) and autonomous invocation allowed (default) are fine. However the skill's described behavior (scheduled checks, automatic pushes) implies persistent/background activity. Because the skill may read your OpenClaw config and env vars, you should be cautious about enabling scheduled/always-running behavior until the code and install process are reviewed.

What to consider before installing

Do not install yet. Ask the publisher for the actual package contents and an install spec (what clawhub fetches), and inspect the helper.js and any install scripts before granting access. Confirm which binaries (git, node) are used and whether the skill will read ~/.openclaw/openclaw.json or any other files. If you must test it, run it in a sandbox or isolated account with no Feishu or other sensitive credentials set, and prefer providing a dedicated, limited-scope Feishu bot/token rather than using global credentials. If the publisher cannot provide code or a clear install manifest, treat the skill as untrusted.

Git 项目监控技能

Git 项目监控技能

自动监控 Git 项目更新（支持 GitHub、GitLab、Gitee 等所有 Git 平台），拉取最新代码并生成变更摘要。

🚀 快速开始（只需3步）

第1步：安装技能

clawhub install git-monitor

第2步：告诉我你要监控什么

直接在对话中说：

"监控 GitHub 项目 anthropics/skills"

"监控 https://gitee.com/mindspore/mindspore"

第3步：开启自动推送（可选）

说："设置定时检查，每6小时一次"

然后就完事了！有代码更新会自动推送到你的飞书/当前聊天窗口。

---

📖 完整使用指南

添加监控仓库

监控 GitHub 项目 anthropics/skills
监控 https://github.com/openai/openai-python
监控 GitLab 项目 gitlab-org/gitlab
监控 Gitee 项目 openharmony/docs

查看监控列表

查看监控列表
列出所有监控的仓库

手动检查更新

检查所有更新
检查 anthropics/skills 的更新

删除监控

删除监控 anthropics/skills

开启/修改定时检查

设置定时检查，每1小时一次
关闭定时检查

---

⚙️ 飞书通知配置（0配置，开箱即用）

✅ 推荐：OpenClaw 主配置（无需任何操作）

如果你的 OpenClaw 已经配置了飞书机器人，自动读取，无需任何操作。

技能会级联读取飞书凭证，优先级：

1. 环境变量 FEISHU_APP_ID / FEISHU_APP_SECRET / FEISHU_CHAT_ID
2. OpenClaw 主配置 ~/.openclaw/openclaw.json 中的飞书配置
3. 以上都没有 → 跳过飞书推送（不影响 Git 监控功能）

可选：使用自己的飞书机器人

# 环境变量方式
export FEISHU_APP_ID="cli_xxx"
export FEISHU_APP_SECRET="xxx"
export FEISHU_CHAT_ID="ou_xxx"

或在 OpenClaw 配置中添加：

"feishu": {
  "appId": "cli_xxx",
  "appSecret": "xxx",
  "chatId": "ou_xxx"
}

获取飞书配置

1. 访问 https://open.feishu.cn/ 创建企业自建应用
2. 获取 App ID 和 App Secret
3. 开启权限：im:chat:read:chat_id 和 im:message:send_as_bot
4. 将应用添加到群聊，获取群聊 ID

---

💻 命令行用法

cd ~/.openclaw/workspace/skills/git-monitor

# 添加仓库
node helper.js add https://github.com/owner/repo

# 查看列表
node helper.js list

# 检查更新
node helper.js check

# 删除仓库
node helper.js remove owner/repo