Back to skill
Skillv1.0.0
VirusTotal security
Kimai Time Tracking · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 3:38 AM
- Hash
- d996574db167cb7e5dcdeb4f6fe5bbd4aeb36251b7030af7f70c1f6192a7ab92
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: kimai-time-tracking Version: 1.0.0 The skill bundle provides a legitimate API client for Kimai time-tracking. The `SKILL.md` clearly outlines the skill's purpose, required environment variables (`KIMAI_BASE_URL`, `KIMAI_API_TOKEN`), and includes strong safety instructions for destructive operations and token handling, without any prompt-injection attempts. The `scripts/kimai_cli.py` Python code is a straightforward API client using standard libraries, accessing only the necessary environment variables and making calls to the specified Kimai API endpoint, with no evidence of data exfiltration to unauthorized destinations, malicious execution, persistence mechanisms, or obfuscation.
- External report
- View on VirusTotal