Security audit
Timesheet - Time Tracking
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward Timesheet CLI guide that can modify Timesheet data when asked, with no hidden code or unrelated behavior found.
Install only if you intend to let Codex use your Timesheet account through the CLI. Verify that the timesheet command on PATH is the official CLI, avoid exposing API keys in chat or logs, and require explicit confirmation before deleting or changing projects, tasks, tags, timers, exports, or account settings.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.