Skip to content
Back to skills

Github Trending Spider

DSecurity

Operate or review the AI Daily Frontier / github-trending-spider project: a Python + Vue app that aggregates GitHub Trending, Hacker News, TLDR AI, V2EX, Linux.do, OpenAI, Anthropic, and InfoQ AI sources into Chinese AI/frontier summaries, JSON snapshots, a FastAPI read API, optional scheduler, optional SMTP email, and a Vue frontend. Use when the user mentions github-trending-spider, AI Daily Frontier, 每日AI前沿, AI 资讯聚合, GitHub Trending 日报, AI 新闻爬虫, or multi-source AI news digest automation.

  • 9 stars
  • 0 votes
  • 0 copies
  • 6 views
  • Added September 9, 2026
developmentpythonshellbashvuefastapigitapifrontendbackend

Works with

  • cli
  • api

Security analysis

D59/100
  • criticalAccesses sensitive system or user directories
  • mediumInstalls packages at runtime which could introduce malicious dependencies
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned September 9, 2026

npx -y skills add Undermybelt/hermes-skills --skill github-trending-spider --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Github Trending Spider?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Github Trending Spider
[![Security: D — Skills Directory](https://www.skillsdirectory.com/api/skills/undermybelt-github-trending-spider/badge)](https://www.skillsdirectory.com/skills/undermybelt-github-trending-spider)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: github-trending-spider
description: >
  Operate or review the AI Daily Frontier / github-trending-spider project: a Python + Vue app that aggregates GitHub Trending, Hacker News, TLDR AI, V2EX, Linux.do, OpenAI, Anthropic, and InfoQ AI sources into Chinese AI/frontier summaries, JSON snapshots, a FastAPI read API, optional scheduler, optional SMTP email, and a Vue frontend. Use when the user mentions github-trending-spider, AI Daily Frontier, 每日AI前沿, AI 资讯聚合, GitHub Trending 日报, AI 新闻爬虫, or multi-source AI news digest automation.
tags:
  - research
  - ai-news
  - spider
  - fastapi
  - vue
  - external-repo
version: 1
---

# GitHub Trending Spider

This is a Hermes wrapper for the local external source checkout:

- Source root: `~/.hermes/external-repos/github-trending-spider`
- Upstream: `https://github.com/wenbochang888/github-trending-spider`
- Reviewed commit: `22d2605a2ba9d88bfcb59552af677d2e279ded5b`

## Use When

- The user asks about `github-trending-spider`, `AI Daily Frontier`, `每日AI前沿`, `AI资讯聚合`, or `GitHub Trending 日报`.
- The task is to inspect, configure, adapt, or safely run the multi-source AI news spider.
- The user wants a daily AI news digest, Chinese AI summary feed, FastAPI read API, Vue news frontend, Redis-backed snapshot cache, or optional email delivery.

## Safety Boundary

Treat this as an application repo, not a pure markdown skill.

Default safe actions:

- Read source and docs.
- Explain architecture and configuration.
- Patch source after normal repo review.
- Run offline syntax checks such as Python compile checks.

Do not run these unless the user explicitly asks for runtime bring-up and confirms scope:

- `pip install -r requirements.txt`
- `npm install`, `npm run serve`, or frontend build commands
- `python3 main.py`
- `python3 -m uvicorn api:app ...`
- `bash scripts/start_backend.sh`, `bash scripts/start_frontend.sh`, or `bash scripts/start_all.sh`
- SMTP send tests or any action with `SEND_EMAIL_ENABLED=true`
- Scheduled collection with `SPIDER_SCHEDULER_ENABLED=true`

## Runtime Risks

- Reads `GITHUB_TOKEN` for GitHub Models summaries.
- Can read SMTP variables and send email through `SMTP_USER` / `SMTP_PASSWORD`.
- Fetches external sites: GitHub Trending, Hacker News, TLDR AI, V2EX, Linux.do, OpenAI, Anthropic, and InfoQ.
- Writes logs and JSON snapshots. The default log path is `/root/logs/github-python/trending.log`, so local runs should override `LOG_FILE`.
- `scripts/start_backend.sh` installs Python dependencies, sources shell/env files, kills existing `uvicorn api:app` processes, creates `/root/logs/github-python`, and binds the backend to `0.0.0.0` by default.
- API startup can launch an in-process scheduler unless `SPIDER_SCHEDULER_ENABLED=false`.

## Safe Verification

For offline checks, prefer:

```bash
cd ~/.hermes/external-repos/github-trending-spider
python3 -m py_compile main.py config.py github_trending.py hacker_news.py tldr_ai.py official_ai_sources.py content_items.py content_store.py redis_client.py scheduler.py source_registry.py api.py access_log.py email_builder.py email_sender.py
```

If checking frontend syntax without installing packages, limit yourself to file inspection unless dependencies already exist.

## Runtime Bring-Up Pattern

Only after explicit approval, use a constrained local run:

```bash
cd ~/.hermes/external-repos/github-trending-spider
export LOG_FILE=/tmp/github-trending-spider.log
export OUTPUT_JSON_PATH=/tmp/github-trending-spider-latest.json
export OUTPUT_ARCHIVE_DIR=/tmp/github-trending-spider-output
export SPIDER_SCHEDULER_ENABLED=false
export SPIDER_RUN_ON_STARTUP=false
export SEND_EMAIL_ENABLED=false
python3 -m uvicorn api:app --host 127.0.0.1 --port 8000
```

For one-shot collection, confirm which external sources may be contacted and whether `GITHUB_TOKEN` should be used. Keep `SEND_EMAIL_ENABLED=false` unless email sending is the explicit task.

## Response Rules

- State whether you are doing source review, offline verification, or approved runtime execution.
- Never print token, SMTP password, or email authorization code values.
- If a secret is relevant, report only set/unset and rough length.
- Prefer local `/tmp` log/output paths for ad hoc runs.
- Preserve the repo's module boundaries: source fetching, content normalization, persistence, API, scheduler, email, and frontend are separate.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…