X Trends Dev

Fetches current top trending topics on X (Twitter) for any country using public aggregators.

Security Scan

The skill is a straightforward web-scraper CLI that fetches trends from getdaytrends.com; its code, dependencies, and instructions are consistent with the stated purpose and request no credentials or unusual privileges.

Purpose & Capability

Name/description promise (fetch X trends via public aggregators) matches the shipped code: index.js issues an HTTPS GET to getdaytrends.com, parses HTML with cheerio, and formats output. Declared dependencies support scraping and CLI behavior.

Instruction Scope

SKILL.md instructs installing and running the CLI only. Neither the documentation nor the code reads local secrets, other files, or extra environment variables; the runtime action is limited to fetching and parsing a single third-party website (getdaytrends.com).

Install Mechanism

Registry entry has no explicit install spec, but the package includes package.json and package-lock.json. Dependencies resolve to npm registry URLs (expected). This implies installation will pull packages from npm (standard supply-chain risk). No remote arbitrary download/extract URLs or personal servers are used.

Credentials

The skill requires no environment variables, credentials, or config paths. The code does not attempt to access unrelated credentials or files; network access to getdaytrends.com is the only external interaction.

Persistence & Privilege

Skill is not forced-always, does not request persistent system-wide privileges, and does not modify other skills' configs. It behaves like a normal user-invoked CLI tool.

Assessment

This skill appears to do exactly what it says: scrape getdaytrends.com and display trends. Things to consider before installing: (1) running it requires network access — it will perform outbound HTTPS requests to getdaytrends.com; (2) installation will fetch dependencies from the npm registry (standard supply-chain risk) — you may want to review package-lock integrity and run in an isolated environment if you're cautious; (3) scraping third-party sites may conflict with that site's terms of service — check getdaytrends.com policy if that matters to you; (4) verify the publisher identity (owner id in registry) if you need provenance. Otherwise the skill’s footprint and behavior are proportional and self-consistent.

X Trends Scraper 📉

A professional CLI tool to fetch X (Twitter) trending topics without an account. Powered by getdaytrends.com.

Installation

clawdhub install x-trends

Usage

Run the tool directly:

# Default (India, Top 20, Table View)
x-trends

# JSON Output (for scripts)
x-trends --json

# Specific Country & Limit
x-trends --country us --limit 5

Features

• No Login Required: Uses public aggregators.
• Volume Data: Shows tweet counts (<10K, 50K, etc).
• Multi-Country: Supports 'us', 'uk', 'india', 'world', etc.
• JSON Mode: Easy parsing for other tools.

Output

Displays a clean, colorized table or raw JSON.