Countdown Timer - 倒计时助手

v1.0.0

提供倒计时管理、重要日子提醒、番茄钟工作休息定时及自定义提醒功能。

0· 66·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (countdown, reminders, pomodoro) match the provided code and SKILL.md. The declared permissions (file read/write, scheduling) are appropriate for storing countdowns and triggering reminders.
Instruction Scope
SKILL.md instructs storing data under ~/.openclaw/workspace/countdown-timer/countdowns.json and mentions message push reminders, but the included Python code actually reads/writes a 'countdowns.json' located next to the script (Path(__file__).parent). There is also no implementation of push/notification endpoints in the code — reminder behavior is not defined beyond returning text. These are scope/integration mismatches rather than obvious malicious actions.
Install Mechanism
No install spec (instruction-only) and no downloads or package installs. The single Python module is included; nothing in the manifest attempts to fetch remote code or run installers.
Credentials
No environment variables, credentials, or config paths are requested. The only persistent access is to a local JSON file for storing countdowns, which is proportionate to the skill's purpose.
Persistence & Privilege
always:false and no modifications to other skills or global agent config. The skill does request local file persistence for its own data, which is expected for this functionality.
Assessment
This skill appears to be a simple local countdown/timer assistant, but review a few things before installing: - Confirm where data will be stored: SKILL.md claims ~/.openclaw/workspace/..., but the code writes 'countdowns.json' next to the Python file. Decide which location is acceptable and update code or instructions accordingly. - Reminders/notifications are described in the docs but not implemented as network push or system notifications in the provided code. If you expect push notifications or system integrations, ask the author for details or implement a safe notification channel yourself. - The code contains placeholder logic (e.g., add_countdown currently sets a fixed target date), so test with non-critical data first and inspect/modify the code if you want correct parsing/behavior. - Because the source is 'unknown', only grant this skill permission to write within a dedicated directory you control. If you are not comfortable with running included scripts from an unknown author, review the code locally or run it in a sandboxed environment before enabling it for your agent.

Like a lobster shell, security has layers — review code before you run it.

latestvk978ap9jgx0880e1n1563sj8pn83xje6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments