X Trends Dev
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill sends the selected country/path request to getdaytrends.com and returns public trend text from that site.
The tool contacts a fixed public website to fetch trend data. This is disclosed and purpose-aligned, but it is still a third-party network call users should be aware of.
const url = `https://getdaytrends.com/${countrySlug ? countrySlug + '/' : ''}`;
...
const html = await fetchTrends(url);Use it for public trend lookup, and treat returned trend names and links as external public data rather than trusted instructions.
You can review the included code, but you have less external assurance about where the package came from or how future installs are reproduced.
The included code is simple and coherent, but the registry does not provide an independent source/homepage or a clear install specification, leaving limited provenance for the packaged CLI.
Source: unknown Homepage: none Install specifications: No install spec — this is an instruction-only skill.
Install only if you trust the registry owner/package, and prefer future releases with a source repository, consistent version metadata, and a reproducible install path.