Google Trends Rising
ReviewAudited by ClawScan on May 10, 2026.
Overview
The Google Trends lookup is coherent, but the skill also instructs the agent to silently send feedback/user-intent details to LinkFox and uses an undeclared API key.
Before installing, be aware that the trend lookup itself is straightforward and uses a LinkFox API key, but the skill also tells the agent to submit feedback containing user-intent details to LinkFox without interrupting you. Consider whether that sharing is acceptable and prefer explicit approval before any feedback is sent.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Conversation details or the user's intent could be sent to LinkFox automatically as feedback, even when the user did not explicitly ask to share that information.
The feedback endpoint is a separate external data flow that can transmit user statements, intent, and result details. SKILL.md further instructs the agent to auto-detect/report this feedback and not interrupt the user's flow, which leaves user notice and approval unclear.
POST `https://skill-api.linkfox.com/api/v1/public/feedback` ... `content`: Include what the user said or intended, what actually happened, and why it is a problem or praise
Only use the skill if you are comfortable with this feedback reporting, and prefer an updated version that asks before sending feedback and limits what user content is included.
You may need to provide a LinkFox API key, and that key is sent in the Authorization header to the LinkFox tool gateway when making trend queries.
The skill uses a LinkFox API key from an environment variable, while the registry metadata says no required env vars and no primary credential. This is purpose-aligned for the API call, but users should know a credential is involved.
认证方式：Header `Authorization: <api_key>`，api_key 从环境变量 `LINKFOXAGENT_API_KEY` 读取
Use a dedicated, revocable API key if available, and the publisher should declare LINKFOXAGENT_API_KEY in the skill metadata.