X Trends Dev
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a benign CLI that fetches public X trend data from getdaytrends.com, with only minor provenance and install-metadata caveats.
This skill is reasonable for fetching public trend information. Before installing, note that it contacts getdaytrends.com and that the registry source/homepage and install metadata are limited; avoid using it where you require fully traceable package provenance.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill sends the selected country/path request to getdaytrends.com and returns public trend text from that site.
The tool contacts a fixed public website to fetch trend data. This is disclosed and purpose-aligned, but it is still a third-party network call users should be aware of.
const url = `https://getdaytrends.com/${countrySlug ? countrySlug + '/' : ''}`;
...
const html = await fetchTrends(url);Use it for public trend lookup, and treat returned trend names and links as external public data rather than trusted instructions.
You can review the included code, but you have less external assurance about where the package came from or how future installs are reproduced.
The included code is simple and coherent, but the registry does not provide an independent source/homepage or a clear install specification, leaving limited provenance for the packaged CLI.
Source: unknown Homepage: none Install specifications: No install spec — this is an instruction-only skill.
Install only if you trust the registry owner/package, and prefer future releases with a source repository, consistent version metadata, and a reproducible install path.