system-time
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to only provide current time, timezone formatting, and time-difference calculations, with no evidence of hidden data access or account-changing behavior.
This looks like a low-risk time utility. Before installing, make sure you trust the package source and are comfortable running a local Node-based MCP server with its npm dependency.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing or updating the skill may fetch compatible dependency versions and run the package’s build/start flow, which is a standard but real trust decision.
The package uses npm build/start scripts and a semver-ranged MCP SDK dependency. This is normal for a Node-based MCP skill, but it means installation or updates rely on locally executed package code and npm-resolved dependency versions.
"scripts": { "build": "tsc", "prepare": "npm run build", "start": "node dist/index.js" }, ... "@modelcontextprotocol/sdk": "^0.5.0"Install only from a trusted source, review dependency changes before updating, and consider pinning dependencies or using a lockfile if repackaging.