The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches search trend data from Google Trends (trends.google.com), which is a well-known and trusted service.
[COMMAND_EXECUTION]: While the script processes command-line arguments (e.g., keywords and geographic regions), it does not execute shell commands or use functions like eval(), effectively mitigating command injection risks.
[DATA_EXFILTRATION]: No access to sensitive local files (such as .env, SSH keys, or AWS credentials) was detected. The script only sends search-related parameters to Google.
[REMOTE_CODE_EXECUTION]: The skill does not download or execute remote scripts or binaries. It is entirely self-contained within the provided trends.mjs script.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external search trend data and article snippets. While this represents a theoretical ingestion point for untrusted content, the skill lacks any dangerous capabilities (such as file writing or system command execution) that could be exploited by such content.

google-trends