Temporal Time Manager
v1.0.2时间管理 AI 助手 Skill，让 AI 通过对话直接管理你的任务、日程和灵感，数据同步至 aitimemg.cn 平台。
⭐ 0· 423·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The skill's stated purpose (manage tasks/schedules on aitimemg.cn) aligns with the APIs in openapi.yaml and the SKILL.md instructions. However the registry metadata claims no required env vars or binaries while SKILL.md metadata declares TEMPORAL_API_TOKEN (required) and a dependency on 'mcporter'. This mismatch is an incoherence: a time-management integration legitimately needs the API token and an HTTP client/CLI, so the SKILL.md requirements are reasonable — but the registry listing failing to show them is a red flag (could be packaging/metadata error or omission).
Instruction Scope
The runtime instructions are scoped to calling the aitimemg.cn API (via mcporter examples) and setting TEMPORAL_API_TOKEN/TEMPORAL_BASE_URL. They do not instruct reading unrelated system files or other credentials. However the SKILL.md and the openapi.yaml contain contradictory notes about whether 'id' is required/auto-generated for tasks (create_task shows required [title,id] in the schema yet other comments say id can be omitted). That API contradiction could lead to unexpected behavior and should be clarified before use.
Install Mechanism
There is no install spec and no code files (instruction-only), which lowers installation risk. But SKILL.md declares a runtime dependency on 'mcporter' (used in examples and metadata.requires), while the registry metadata reported 'required binaries: none'. The absence of an install step is normal, but the undeclared dependency on a CLI is an inconsistency users should be aware of.
Credentials
The skill requires TEMPORAL_API_TOKEN (and optionally TEMPORAL_BASE_URL) to authenticate to aitimemg.cn — this is proportionate to the stated purpose. The concern is that the publicly shown registry metadata omitted these required env vars/credentials, so a user might install the skill without realizing it will need and transmit an API token to a third-party service. Data policy in SKILL.md says data is stored (阿里云) and shared_with_third_parties: false; users must trust the external service with their task content.
Persistence & Privilege
The skill is not always:true, does not request system-level persistence, and is instruction-only (no install writes). It will send data to the external API when invoked, which is expected for this integration. Autonomous invocation is allowed by default but not unusually privileged here.
What to consider before installing
Before installing: (1) Understand that this skill sends your tasks, schedules, and captured ideas to aitimemg.cn; only install if you trust that service and its privacy/data-retention polices (SKILL.md includes a delete-account URL and claims storage on Alibaba Cloud). (2) SKILL.md requires an API token (TEMPORAL_API_TOKEN) and references the 'mcporter' tool, but the registry listing omitted those requirements — confirm you have mcporter and plan to create a dedicated API token (do not reuse higher-privilege tokens). (3) The openapi.yaml and SKILL.md disagree about whether callers must supply task/schedule 'id' — clarify whether the backend auto-generates IDs to avoid accidental data overwrite. (4) Prefer creating a least-privilege token on aitimemg.cn, test with non-sensitive/dummy data first, and be ready to rotate/revoke the token if anything unexpected occurs. (5) If you need higher assurance, ask the publisher to correct registry metadata (declare required env vars and binaries) and confirm the API behavior (id requirement) before trusting production data.Like a lobster shell, security has layers — review code before you run it.
latestvk97c92qsze5z7ys2fd4199f76d82bm15
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Environment variables
TEMPORAL_BASE_URL— 你的 API 地址（默认 https://api.aitimemg.cn）TEMPORAL_API_TOKENrequired— 在 aitimemg.cn 生成的 API Token（用于身份认证）