Focus Deep Work
v1.0.0Maximize deep work with focus sessions, distraction logging, and productivity tracking
⭐ 9· 7.8k·58 current·60 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name and description align with a focus/timer/productivity tracker. Key capabilities (timers, logging, stats) fit the stated purpose. However the skill also claims automatic silencing, app blocking, notification management and website blocking — capabilities that normally require system-level permissions or helper software, yet the skill declares no required binaries, installs, config paths, or credentials.
Instruction Scope
SKILL.md instructs the agent to perform actions that touch system state (mute notifications, close/minimize apps, change screen brightness, block websites) and to store detailed session logs locally. The document gives no concrete, constrained method for doing these things and provides no limits on what apps/sites can be controlled. That creates scope ambiguity: the agent would need broad system access or external tooling to implement these behaviors, but none is described.
Install Mechanism
There is no install spec and no code files — lowest risk from install mechanisms. Because no installer or downloaded artifacts are present, nothing will be written to disk by the skill itself at install-time. However, absence of an install step increases ambiguity about how system-level features would be implemented when invoked.
Credentials
The skill declares no required environment variables or config paths, yet its functionality implies the need for permissions (notification control, app/process control, possibly browser-level website blocking). The lack of declared required permissions or an explicit helper component is disproportionate to the claimed capabilities and makes it unclear what the agent will request from the user at runtime.
Persistence & Privilege
always is false and there is no install or code that would persistently run or modify other skills/configurations. The skill does not request permanent presence or system-wide configuration changes in the metadata, which is appropriate for its purpose.
What to consider before installing
This skill reads like a helpful focus/timer assistant, but it is instruction-only and gives no implementation details. Before installing or enabling it, ask the publisher for: (1) the implementation — is there a helper app, native integration, or a browser extension? (2) what exact permissions it will request (notification control, process termination, accessibility or browser permissions)? (3) where session logs are stored and whether any data is ever transmitted off your device (the SKILL.md asserts logs stay local but there's no code to verify). Do not grant broad system or accessibility permissions without seeing the code or a trusted source/homepage. If you test it, do so in a controlled environment (VM or disposable profile) and limit its permissions to the minimum needed (timer-only) until you can verify the implementation and data handling.Like a lobster shell, security has layers — review code before you run it.
latestvk973ntqg2684r8qg6s7veapmen7zxxtx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.