Nex Timetrack

Billable time logger for freelancers and agencies. Start/stop timers or log manually. Client and project management, rate cascading, 15-minute rounding, bill...

Security Scan

The skill is internally consistent with a local Python+SQLite time-tracker: it stores data under the user's home directory, creates a local CLI wrapper, and does not request credentials or network access.

Purpose & Capability

Name/description match the code and runtime instructions: a local Python CLI time-tracker using SQLite. Declared features (timers, clients, projects, exports, FTS search, 15-minute rounding) are implemented in the repository files. The only environment variable mentioned (NEX_TIMETRACK_DIR) directly relates to storage location and is reasonable for this purpose. One non-security inconsistency: licensing is inconsistent across SKILL.md (MIT-0), LICENSE.txt (AGPL-3.0), and README; this is a legal/licensing issue but does not affect runtime behavior.

Instruction Scope

SKILL.md instructs running setup.sh and using the CLI; the code and scripts operate on local files in ~/.nex-timetrack and create a wrapper in ~/.local/bin. The instructions and code do not attempt to read unrelated system configuration, other skills' credentials, or transmit data externally. The skill's claim 'No cloud, no telemetry' matches the visible code (no network calls in provided files).

Install Mechanism

There is no remote installer; setup.sh is included and is the intended install mechanism. setup.sh checks for Python 3.8+, creates ~/.nex-timetrack and exports, initializes the DB by invoking the included Python module, and writes a wrapper script into ~/.local/bin. This writes files to the user's home directory and places an executable in ~/.local/bin — expected for a CLI tool but worth noting because it modifies the user's PATH-adjacent location and creates persistent files.

Credentials

The skill does not require any credentials or external environment variables except an optional NEX_TIMETRACK_DIR to override the storage path. No tokens/keys/passwords are requested. The environment access requested is proportional to a local storage-centric CLI application.

Persistence & Privilege

The skill does create persistent data and a CLI wrapper in the user's home directory (~/.nex-timetrack and ~/.local/bin). always is false and model invocation is not disabled. These are standard for a user-installed local CLI but mean the skill will remain on disk and executable until the user removes it; users should be aware of that persistence.

Assessment

This appears to be a straightforward local time-tracker. Before installing: (1) review the included files yourself (they're local and human-readable) if you can, (2) note the licensing mismatch (SKILL.md vs LICENSE.txt) and decide which license you accept, (3) the setup script will create ~/.nex-timetrack and place a wrapper in ~/.local/bin — check that directory and add it to your PATH if needed, (4) run setup.sh in a controlled environment (or inspect it first); there are no network calls or secret-env requests in the provided code, so the privacy claim appears supported. If you need to restrict persistence, run the script manually without creating the wrapper or run the Python module directly from the source directory.

Billable time logger built for freelancers and agencies. Track time with a live timer or log entries manually. Manage clients, projects, and rates. Generate billing summaries with optional 15-minute rounding.

Requirements

• Python 3.8+
• No external dependencies (stdlib only)
• SQLite (built into Python)

Setup

bash setup.sh

Commands

Command	What it does
start	Start a live timer
stop	Stop timer and save entry
status	Show running timer
cancel	Cancel timer without saving
log	Log time manually
show	Show entry details
list	List entries with filters
edit	Edit an entry
delete	Delete an entry
search	Full-text search entries
client-add	Add a client with rate
clients	List all clients
project-add	Add a project
projects	List all projects
summary	Billing summary with totals
stats	Usage statistics
export	Export to JSON or CSV

Rate Cascade

Rates resolve in this order: entry rate > project rate > client rate > default (85 EUR/h). Set rates at whatever level makes sense for your billing.

Duration Format

When logging manually, use any of these:

• 2h = 2 hours
• 90m = 90 minutes
• 1h30m = 1 hour 30 minutes
• 1.5 = 1.5 hours

Tone Guide

This skill responds to natural language through ClawdBot. Example interactions:

Starting a timer:

"Start tracking time for the Bakkerij Peeters redesign"

nex-timetrack start "Bakkerij Peeters redesign" --client "Bakkerij Peeters" --category development

Logging time manually:

"Log 2 hours of design work for Lux Interiors yesterday"

nex-timetrack log "Homepage design" 2h --client "Lux Interiors" --category design --date 2026-04-05

Stopping the timer:

"Stop the timer, I finished the API integration"

nex-timetrack stop --notes "Completed API integration for payment flow"

Checking what's running:

"Is my timer running?"

nex-timetrack status

Billing summary for a client:

"How many hours did I bill Bakkerij Peeters this month?"

nex-timetrack summary --client "Bakkerij Peeters" --date-from 2026-04-01 --round-up

Weekly overview:

"Show me this week's time entries"

nex-timetrack list --date-from 2026-03-31 --date-to 2026-04-06

Adding a client:

"Add Bakkerij Peeters as a client at 95 per hour"

nex-timetrack client-add "Bakkerij Peeters" --rate 95 --email "[e-mail]"

Export for invoicing:

"Export all billable hours for Lux Interiors as CSV"

nex-timetrack export csv --client "Lux Interiors" --billable

Storage

All data stored locally in ~/.nex-timetrack/timetrack.db (SQLite). No cloud, no telemetry.

Override with: export NEX_TIMETRACK_DIR=/custom/path

License

MIT-0 on ClawHub (free for any use). AGPL-3.0 on GitHub (commercial licenses via [e-mail]).