Time Tool

• Risk level: Low
• Analyzed: May 5, 2026, 6:58 PM
• Findings: 1
• Version: 1.0.0

Overview

This is a simple command timing skill; it runs the command you provide, so only benchmark commands you trust.

This skill appears benign and narrowly scoped. Remember that it does not simulate commands—it runs them—so only use it to time commands you already trust and intend to execute.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Note

What this means

If the user or agent times a destructive or sensitive command, that command's effects will still occur.

Why it was flagged

The tool executes the command and arguments supplied to it. This is purpose-aligned for a command timer, but it means any supplied command will actually run on the local machine.

Skill content

subprocess.run(sys.argv[1:])

Recommendation

Use this only with commands you intend to run; review the command before benchmarking it.