Trigger
v2.0.0Trigger - command-line tool for everyday use Use when you need trigger.
⭐ 0· 199·0 current·0 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The package advertises a CLI 'trigger' utility and the included bash script implements many expected features (add/plan/track/export/status/etc.). This is generally consistent with the description. Minor mismatch: SKILL.md says you can set TRIGGER_DIR to change the data directory, but the script as provided uses DATA_DIR="${HOME}/.local/share/trigger" and does not read TRIGGER_DIR, so the documentation overstates configurability.
Instruction Scope
SKILL.md instructs normal local CLI usage and the script's commands align with that. The instructions do not ask the agent to read unrelated system files, exfiltrate data, or contact external endpoints. Notes: SKILL.md lists a smaller set of commands than the script actually implements, and the documented TRIGGER_DIR environment override is not implemented in the script.
Install Mechanism
No install spec or remote downloads are used; the skill is instruction-only with an included script file. No external packages or network fetches are present in the repository files provided.
Credentials
The skill requests no credentials and no required environment variables. The only environment/config access is to the user's HOME (to create ~/.local/share/trigger). SKILL.md mentions TRIGGER_DIR as configurable via env var, but the script does not honor it—this is an internal inconsistency but not a credential risk.
Persistence & Privilege
The skill does not request 'always' presence, does not modify other skills or system-wide configs, and only writes to its own data directory under the user's home. It runs with normal user privileges.
Assessment
This skill appears to be a simple local CLI tool that stores logs under ~/.local/share/trigger and does not contact the network or require credentials. Before installing or running: (1) review the script (scripts/script.sh) yourself — it will create and write files in your home directory; (2) be aware the SKILL.md mentions TRIGGER_DIR but the script currently ignores that env var; if you need a custom data directory you may want to modify the script or ask the author; (3) run the script as your normal user, not root; and (4) if you plan to run it in automation, verify outputs and file permissions to avoid accidental exposure of logged content.Like a lobster shell, security has layers — review code before you run it.
latestvk971mh2f87gdgxjvvpaeb8w1px8324af
License
MIT-0
Free to use, modify, and redistribute. No attribution required.