Toggl CLI – Time tracking for you and your agent

• Outcome: Review
• Latest audit: May 28, 2026 at 8:05 AM UTC
• Version:
  1.0.0

Overview

The skill is a coherent Toggl CLI guide, but it asks users to install unreviewed external Node code, give it a long-lived Toggl API token, and run commands that can change or delete workspace data without safety guidance.

Review the external toggl-cli repository and dependencies before installing, ideally pinning a trusted commit. Treat TOGGL_API_TOKEN as a secret, store it only where local permissions are appropriate, rotate it if exposed, and require explicit confirmation before any create, update, archive, restore, delete, start, or stop command runs against real Toggl data.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The skill documents destructive operations such as delete/archive commands without any warning, confirmation guidance, or notes about irreversible effects. In an agent-skill context, this increases the chance of accidental data loss because a user or downstream agent may invoke deletion commands directly based on the examples.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill instructs users to store a long-lived API token and shows authenticated usage, but does not warn about token sensitivity, least-privilege handling, shell history exposure, or risks of placing secrets in broadly readable config files. This can lead to credential leakage and unauthorized access to Toggl workspace data if the token is exposed.

VirusTotal

66/66 vendors flagged this skill as clean.