Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed focus timer and soundscape toolkit whose local scripts and small persistent session log match its stated purpose.
Install this if you want a local focus workflow and are comfortable with it creating scheduled reminders and saving pomodoro history under your QClaw workspace memory. Review or clear those reminder schedules and JSON logs if you no longer want cross-session tracking.
An executable nested in a document or hidden/disguised artifact can evade ordinary extension-based review while still being available to the skill at runtime.
An executable nested in a document or hidden/disguised artifact can evade ordinary extension-based review while still being available to the skill at runtime.
An executable nested in a document or hidden/disguised artifact can evade ordinary extension-based review while still being available to the skill at runtime.
An executable nested in a document or hidden/disguised artifact can evade ordinary extension-based review while still being available to the skill at runtime.
The natural-language description explicitly states that the time parser is for Chinese time parsing only. In this markdown file, there is no accompanying statement that users may choose another language or locale, which can violate language/locale policy requirements for user choice.
No suspicious patterns detected.
