Time Awareness

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only time helper requests no credentials, code execution, or install hooks, with only minor notes about accuracy claims and optional external-repo installation guidance.

This looks safe to install as an instruction-only skill, but do not rely on it as the sole authority for trading schedules, holidays, or other critical timing decisions; also verify the GitHub repository separately if you choose the manual clone route.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI09: Human-Agent Trust Exploitation
Low
What this means

A user might over-trust time or market-hours answers, especially for financial timing decisions.

Why it was flagged

These are broad reliability claims, including market-hours and holiday knowledge, but the artifacts do not include code or data sources showing how that accuracy is maintained.

Skill content
Never make time-sensitive mistakes again. Forces time verification before claims... Knows holidays and early closes
Recommendation

Use the skill as a convenience aid, but verify market schedules and critical time-sensitive decisions against authoritative sources.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

If a user installs from the external repository instead of the reviewed artifact, they may be using content not covered by this review.

Why it was flagged

The README gives an optional external repository clone path, while the supplied registry artifact itself contains no install spec or code to review from that repository.

Skill content
git clone https://github.com/proceedinghumbly/time-awareness.git
Recommendation

Prefer the reviewed registry installation or separately inspect the external repository before cloning or running anything from it.