Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Focus Master

v1.0.1

Manage tasks with configurable Pomodoro timers, track time spent, analyze time allocation, block distractions, and generate efficiency reports.

0· 371·2 current·2 all-time
byhaidong@harrylabsj

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for harrylabsj/focus-master.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Focus Master" (harrylabsj/focus-master) from ClawHub.
Skill page: https://clawhub.ai/harrylabsj/focus-master
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install harrylabsj/focus-master

ClawHub CLI

Package manager switcher

npx clawhub@latest install focus-master
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The name/description indicate a local CLI for Pomodoro and task tracking, which matches the SKILL.md usage examples and data storage location. However package.json declares a binary named "time-management" and the SKILL.md asks you to symlink that file, but no executable or code file named "time-management" is present in the skill bundle. That mismatch suggests the package is incomplete or expects you to obtain a binary from an unspecified place.
Instruction Scope
The runtime instructions are narrowly scoped to installing a symlink, running the CLI, reading/writing local config and an SQLite DB under ~/.openclaw/data/time-management/, and changing settings — all consistent with a local productivity tool. The instructions do not request other system files or external endpoints. The 'focus mode / block distractions' feature is vague and not documented in the SKILL.md; how it blocks distractions (hosts file, notifications, window management, firewall, browser extensions, etc.) is unspecified and should be clarified before trusting it.
!
Install Mechanism
There is no formal install spec (instruction-only), which is low risk in itself, but the SKILL.md instructs creating a symlink from ~/.openclaw/workspace/skills/focus-master/time-management to ~/.local/bin/time-management. Because the executable file is not included in the bundle, following this instruction would either create a broken symlink or rely on you to place an executable in that path from an unspecified source. package.json points to a GitHub repo, but no automated or documented safe fetch/install step is provided — this is an integrity/ provenance gap.
Credentials
The skill declares no required environment variables, no credentials, and stores data locally under ~/.openclaw/data/time-management/. Requesting only local config/db access is proportionate for the stated purpose.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and its only persistent artifact is a local data directory and the optional symlink in ~/.local/bin. Those are normal for a user-installed CLI; still, creating a binary in PATH via symlink is something you should verify the source of before doing.
What to consider before installing
This bundle looks like a CLI Pomodoro/task tracker, but the package is missing the actual 'time-management' executable it tells you to symlink. Do not run the ln -s command or place any binary in your PATH until you verify the executable's source and contents. Recommended steps before installing: - Inspect the skill directory in ~/.openclaw/workspace/skills/focus-master/ to confirm whether a 'time-management' file exists and is the code you expect. - If the file is missing, obtain the source from the referenced GitHub repo (package.json.repository) and review the code before installing. Prefer cloning the repository yourself and inspecting scripts. - If a prebuilt binary is provided, verify its checksum/signature and review what operations it performs (especially anything that modifies system files like /etc/hosts, firewalls, or browser settings) in a sandbox or VM. - Ask the skill author for the missing executable or source code; do not symlink an unknown file into ~/.local/bin. - Because 'focus mode' could change system behavior, confirm exactly how it blocks distractions before granting it broad file or system access. I assessed this as 'suspicious' (not necessarily malicious) because of the incomplete packaging and unclear provenance of the executable; additional information (the missing script or a trustworthy repo snapshot) would likely change the verdict to benign.

Like a lobster shell, security has layers — review code before you run it.

latestvk973mgp9hwfzkst8sdq9kvad1182q4gy
371downloads
0stars
2versions
Updated 48m ago
v1.0.1
MIT-0
  • 🍅 番茄钟计时器: 可配置专注/休息时间
  • ⏱️ 任务时间记录: 追踪每个任务的实际用时
  • 📊 时间分配分析: 分类统计、趋势分析
  • 🔒 专注模式: 屏蔽干扰,提高效率
  • 📈 效率报告生成: 日/周/月报告

安装

# 添加到 PATH
ln -s ~/.openclaw/workspace/skills/focus-master/time-management ~/.local/bin/time-management

使用

番茄钟

# 开始25分钟番茄钟
time-management pomodoro --task "写代码"

# 自定义时长
time-management pomodoro --task "阅读" --duration 45

# 指定分类
time-management pomodoro --task "学英语" --category study

任务计时

# 开始任务计时
time-management task-start "项目开发" --category work

# 结束当前任务
time-management task-stop

# 查看任务记录
time-management tasks --limit 20

统计与报告

# 查看番茄钟统计
time-management stats

# 生成日报
time-management report

# 指定日期报告
time-management report --date 2024-01-15

专注模式

# 开启专注模式(默认25分钟)
time-management focus

# 自定义时长
time-management focus --duration 60

配置

# 查看配置
time-management config show

# 修改配置
time-management config set pomodoro_duration 30

配置项

配置项默认值说明
pomodoro_duration25番茄钟时长(分钟)
short_break5短休息时长(分钟)
long_break15长休息时长(分钟)
notification_enabledtrue启用系统通知

数据存储

数据存储在 ~/.openclaw/data/time-management/:

  • time_management.db - SQLite 数据库
  • config.json - 用户配置

技术栈

  • Python 3.8+
  • SQLite
  • argparse

Comments

Loading comments...