Pinterest Trends Dashboard
v1.0.0Real-time visualization dashboard showing trending ClickBank niches, Pinterest search volume estimates, and affiliate payout potential. Helps users identify...
⭐ 1· 64·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description promise a 'real-time visualization' and Pinterest/ClickBank integrations, but the provided runtime instructions and files implement a static JSON-driven MVP (no API keys, no scrapers included). This is explained in the roadmap (Phase 2/3 will add API access), so the current capability is coherent with an MVP that uses embedded data — not actually 'real-time' yet.
Instruction Scope
SKILL.md gives build/deploy steps, UI/component specs, and example integrations (clickbank-scraper, n8n workflow, OpenClaw cron). None of the instructions tell the agent to read unrelated user files or secrets. The OpenClaw cron example and git push/deploy commands indicate the skill assumes the agent can run shell commands in a project directory — verify that any agent-run commands operate only in intended paths and repos before granting access.
Install Mechanism
No install specification or third‑party downloads are present — this is instruction-only with static assets and design files. That minimizes disk‑write/installation risk.
Credentials
No environment variables or credentials are required by the current MVP. The roadmap mentions future Pinterest and ClickBank API integrations (which would legitimately need API keys), so if/when those are added, expect new credential requirements. Currently there are no unexplained secret requests.
Persistence & Privilege
Flags show default behavior (not always:true). The skill does not request permanent presence or modify other skills. Autonomous invocation is allowed by platform default but the skill does not request elevated persistence.
Scan Findings in Context
[no-regex-matches] expected: The repo is instruction- and asset-only (no code files to scan), so the regex scanner found nothing. Absence of findings is expected but provides limited signal — manual review of SKILL.md and included assets is the primary source of assessment.
Assessment
This skill is an MVP design + build plan for a Pinterest/ClickBank dashboard that currently uses static JSON and requires no credentials or installs. Before installing or running it: (1) understand that 'real-time' features are listed as future work and will require Pinterest/ClickBank API keys — only provide those when you trust the source, (2) review any cron/git commands the agent will run so it cannot push or build in repositories you don't intend, (3) if you enable automation (n8n or auto-pin generation), verify which external accounts/keys are used and limit scope, and (4) treat the included preview HTML (loads remote CDNs) like any external asset — inspect before hosting. There are no immediate red flags, but exercise normal caution when enabling the planned integrations that will require credentials or network access.Like a lobster shell, security has layers — review code before you run it.
latestvk97f57q1nsj0v9twyeh0nscgyh83p3hv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.