Security audit
Time Analyzer
Security checks across malware telemetry and agentic risk
Overview
The skill appears purpose-aligned and local-only, but it stores personal activity history and includes optional npm and cron setup steps users should review.
This looks safe for its stated purpose if you are comfortable keeping local activity logs. Before installing, verify the npm package/source, avoid sensitive activity descriptions, know where ~/.time-analyzer data is stored, and use the cron example only if you intentionally want recurring daily reports.
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
