D4 World Boss Tracker
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to do what it says—fetch Diablo 4 world boss timing from a fixed website—but users should notice its optional cron reminder and lightly under-declared runtime details.
This looks safe for its stated purpose. Before installing, be aware that it contacts the documented Caimogu page for boss timing and may offer to create a cron-based reminder; only approve that reminder if you want a scheduled local notification and know how to remove it later.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If enabled, the skill may add a scheduled reminder on the user’s system; users may need to know how to remove or verify it.
The skill explicitly proposes creating a scheduled reminder with cron after asking the user. This is aligned with the stated reminder feature, but cron creates persistent local scheduled behavior.
查询后询问用户是否需要设置定时提醒。如果需要，使用 cron 工具在刷新前提醒
Only create a cron reminder after explicit user confirmation, make it one-time or self-cleaning where possible, and tell the user how to inspect or remove the scheduled entry.
The skill may fail or behave differently if python3 or curl is unavailable, but the artifact does not show hidden installation or unsafe dependency loading.
The script depends on the local curl binary, while the registry metadata declares no required binaries. This is under-declared but the fixed URL and simple use are coherent with the skill’s purpose.
subprocess.run(["curl", "-s", "-L", URL], capture_output=True, text=True, timeout=30)
Declare python3/curl requirements in metadata and keep the fetch command fixed to the documented Caimogu source.