← 返回 Skills 市场
237
总下载
0
收藏
1
当前安装
5
版本数
在 OpenClaw 中安装
/install trendproof
功能描述
Query TrendProof (trendproof.dev) for keyword trend velocity scores. Returns velocity score, trend direction (rising/stable/falling), monthly search volume,...
安全使用建议
This skill appears to implement the advertised TrendProof API calls, but there are a few things to watch before installing or using it:
- Do not paste your API key into chat. SKILL.md's wording encourages users to "send it to me"; instead run the provided configure command locally (python3 skills/trendproof/scripts/trendproof.py configure --api-key TRND_xxxxx) or set TRENDPROOF_API_KEY in your shell. Pasting secrets into a conversation can expose them to logs or the agent's memory.
- Expect the script to write the key to ~/.config/clawdbot/trendproof.json. If you prefer not to store the key on disk, use an environment variable for the session and remove it when done.
- The script allows overriding the API base URL via TRENDPROOF_BASE_URL. Leave this unset unless you trust the endpoint; a malicious override would cause your API key and requests to be sent to an arbitrary server.
- Metadata omitted the config/env requirements; if you want to be cautious, review the included scripts/trendproof.py yourself (or have a trusted developer do so) before supplying credentials and confirm the owner/source of the skill (source is listed as unknown).
- If you still want to use it: prefer setting TRENDPROOF_API_KEY in your environment or running the configure command locally rather than pasting the key into agent chat, and review the saved config file to verify only the expected key is stored.
功能分析
Type: OpenClaw Skill
Name: trendproof
Version: 1.2.2
The trendproof skill bundle is a standard API integration for keyword trend analysis via trendproof.dev. The Python script (trendproof.py) uses only the standard library to perform HTTP POST requests and manage a local configuration file (~/.config/clawdbot/trendproof.json) for storing the API key. There is no evidence of data exfiltration, malicious execution, or harmful prompt injection instructions in SKILL.md.
能力评估
Purpose & Capability
The skill's name/description (query TrendProof) matches the included CLI script which performs HTTP calls to trendproof.dev. However the registry metadata declared no required env vars or config paths while the code actually reads TRENDPROOF_API_KEY and TRENDPROOF_BASE_URL and reads/writes a config file at ~/.config/clawdbot/trendproof.json. That mismatch between declared requirements and actual behavior is an incoherence the user should notice.
Instruction Scope
SKILL.md instructs the agent to check for an API key and — if missing — to ask the user to "Copy your key ... and send it to me." That phrasing encourages users to paste a secret directly into the chat session. The script also documents running a configure command which writes the key to disk; both behaviors are within the stated purpose (calling the API) but create clear opportunities for sensitive data exposure if the user follows the 'send it to me' path. Otherwise the instructions stick to API calls and expected CLI usage.
Install Mechanism
No install spec (instruction-only + a pure-Python script included). The script uses only the Python standard library and does not download external code, so installation risk is low.
Credentials
Providing an API key (TRENDPROOF_API_KEY) is proportionate to the skill's function, but the metadata advertised no required env vars while the code relies on them. The script also accepts TRENDPROOF_BASE_URL as an override — useful for testing but potentially dangerous because a malicious or misconfigured base URL would cause the skill to send the API key and requests to an arbitrary endpoint. The script persists the key to ~/.config/clawdbot/trendproof.json, which is expected behavior but should be disclosed up-front in the metadata.
Persistence & Privilege
The skill is not always: true and does not request elevated privileges. It does persist user API keys to a local config file and supports an override env var for base URL. Autonomous invocation (default) is allowed — normal for skills — so consider that the agent could use a stored key without further prompts.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install trendproof - 安装完成后，直接呼叫该 Skill 的名称或使用
/trendproof触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.2.2
Direct link to API keys: /dashboard#keys; agent now sends one-click URL
v1.2.1
Improved onboarding: agent now checks for API key before calling, guides user to trendproof.dev/dashboard with clear steps
v1.2.0
Dashboard: 3-step setup with one-click copy, agent prompt with API key pre-filled. Landing: skill link added.
v1.1.1
Remove cost_usd from output (internal metric)
v1.1.0
Auth: Bearer token (TRND_ prefix), added related keywords command, updated docs
元数据
常见问题
TrendProof 是什么？
Query TrendProof (trendproof.dev) for keyword trend velocity scores. Returns velocity score, trend direction (rising/stable/falling), monthly search volume,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 237 次。
如何安装 TrendProof？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install trendproof」即可一键安装，无需额外配置。
TrendProof 是免费的吗？
是的，TrendProof 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
TrendProof 支持哪些平台？
TrendProof 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 TrendProof？
由 akvise（@akvise）开发并维护，当前版本 v1.2.2。
推荐 Skills