github-trending-daily定时获取并推送每日、每周或每月 GitHub Trending 热门项目至钉钉群，支持测试和只获取模式。
Install via ClawdBot CLI:
clawdbot install jiangzhiyu/github-trending-dailyGrade Limited — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
WEBHOOK → https://oapi.dingtalk.com/robot/send?access_token=0d8da1a9a2f0360d7a4c086bb84912Calls external URL not in known-safe list
https://github.com/huggingface/skillsAI Analysis
The skill's external API calls (DingTalk webhook, GitHub) are consistent with its stated purpose of fetching trending repositories and sending notifications. While the webhook URL contains a hardcoded access token, this appears to be for the skill's own notification service rather than credential harvesting. No hidden instructions, data exfiltration, or obfuscation were found.
Audited Apr 17, 2026 · audit v1.0
Generated Mar 21, 2026
Development teams use this skill to stay informed about trending GitHub projects relevant to their tech stack, fostering innovation and keeping up with industry trends. It automates daily or weekly updates via DingTalk, reducing manual monitoring efforts.
Educational institutions and coding bootcamps integrate this skill to provide students with real-time examples of popular open-source projects, enhancing learning materials and encouraging exploration of current tools and frameworks.
Open-source project maintainers and community managers use it to track trending repositories, identify collaboration opportunities, and share insights with their communities through automated DingTalk notifications.
Companies in fast-paced industries deploy this skill to monitor GitHub trends for competitive analysis and innovation scouting, ensuring teams are aware of emerging technologies and tools that could impact their business.
DevOps teams incorporate this skill into their automation pipelines to receive scheduled updates on trending tools and libraries, aiding in decision-making for infrastructure upgrades and tool adoption.
Offer a premium version with advanced analytics, custom filtering by programming language or topic, and integration with multiple messaging platforms beyond DingTalk. Revenue is generated through monthly or annual subscriptions for teams and enterprises.
Provide a free basic version for individual users with limited pushes, and charge for API access, higher frequency updates, or historical data exports. This model attracts developers and monetizes through API usage tiers and enterprise licenses.
Monetize by offering consulting services to businesses for custom integrations, such as tailoring the skill to specific industry needs, adding proprietary data sources, or embedding it into existing corporate communication systems. Revenue comes from project-based fees and ongoing support contracts.
💬 Integration Tip
Ensure the DingTalk webhook is correctly configured and test with dry-run mode before setting up cron jobs to avoid failed pushes.
Scored Apr 19, 2026
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
Essential Git commands and workflows for version control, branching, and collaboration.
Git commits, branches, rebases, merges, conflict resolution, history recovery, team workflows, and the commands needed for safe day-to-day version control. U...
Query and manage GitHub repositories - list repos, check CI status, create issues, search repos, and view recent activity.
Advanced git operations beyond add/commit/push. Use when rebasing, bisecting bugs, using worktrees for parallel development, recovering with reflog, managing subtrees/submodules, resolving merge conflicts, cherry-picking across branches, or working with monorepos.
GitHub 趋势监控 | GitHub Trending Monitor. 获取 GitHub 热门项目、编程语言趋势、开源动态 | Get GitHub trending repos, language trends, open source updates. 触发词：GitHub、trending、开源、热...