TaskTime CLI

CLI task timer for AI agents — benchmark learning progression with auto-save logs and visualizations. Integrates with ClawVault for persistent memory.

Security Scan

The skill's CLI functionality and local data storage match its description, but the advertised automatic sync to ClawVault (an external service) and lack of declared credentials, homepage, or source information are inconsistent and worth caution.

Purpose & Capability

The skill name/description align with requiring a tasktime CLI binary and the npm package @versatly/tasktime. However, the description claims automatic integration with ClawVault (an external memory service) but there are no declared environment variables, config paths, or required binaries for authenticating or interacting with ClawVault—this is an unexplained gap.

Instruction Scope

SKILL.md only instructs use of the tasktime CLI and references a local data file (~/.tasktime/tasks.json), which is expected. It also states that completed tasks are 'Auto-save[d] to ClawVault' on stop, implying automatic transmission of user task data to an external service. The instructions neither document how authentication to ClawVault is obtained nor require or declare the clawvault binary; automatic external sync without describing credential or user consent is a scope concern.

Install Mechanism

Install is via npm: @versatly/tasktime producing binaries tasktime and tt. npm is a reasonable distribution channel for a CLI, but the skill metadata lacks a homepage or verifiable source repository, increasing uncertainty about the package contents and trustworthiness.

Credentials

The skill declares no required environment variables or credentials, yet it performs automatic syncs to ClawVault (network exfiltration of task logs). If ClawVault requires authentication, those creds are not declared, which is inconsistent. There is a risk the CLI may read auth tokens from unexpected locations or rely on implicit agent credentials; the metadata should specify what secrets or config are needed.

Persistence & Privilege

The skill does not request always:true and only writes to its own path (~/.tasktime/tasks.json), which is reasonable for a CLI timer. The primary privilege concern is the automatic external sync behavior rather than local persistence; the skill does not claim to modify other skills or global agent settings.

What to consider before installing

Before installing: (1) Verify the npm package source (check the package page, repository, and publisher) rather than installing blindly. (2) Inspect the package contents (or install in an isolated container/VM) to confirm what it does, especially network calls. (3) Confirm how ClawVault auth is handled — if you don't want external uploads, use tasktime stop --no-vault or avoid enabling sync. (4) Review ~/.tasktime/tasks.json for sensitive content and consider filesystem permissions. (5) Prefer non-global or sandboxed installation while evaluating. If you need help reviewing the package files or determining what auth the CLI uses, gather the package tarball or repository link and consult someone who can inspect it.

tasktime Skill

CLI task timer for AI agents — benchmark learning progression with auto-save logs and visualizations.

Part of the ClawVault ecosystem for AI agent memory.

Installation

npm install -g @versatly/tasktime

Quick Reference

Timer Commands

tasktime start "Task description" --category coding   # Start timing
tasktime stop --notes "What I learned"                # Stop and save
tasktime status                                       # Show current task
tasktime now                                          # One-liner for prompts

History & Search

tasktime history                    # Recent tasks (alias: tt ls)
tasktime history -n 20              # Last 20 tasks
tasktime history -c coding          # Filter by category
tasktime search "auth"              # Full-text search
tasktime categories                 # List all categories

Reports & Charts

tasktime report                     # Full report with charts
tasktime report --days 30           # Last 30 days
tasktime chart --type bar           # Bar chart
tasktime chart --type spark         # Sparkline
tasktime chart --type line          # Line chart

ClawVault Integration

Auto-save on stop (v1.2.0+): Every completed task is automatically saved to ClawVault:

tasktime start "Build API" -c coding
# ... do the work ...
tasktime stop --notes "Finished in record time"
# ✅ Completed: Build API
# 🐘 Saved to ClawVault              ← automatic!

Manual sync and export:

tasktime sync                       # Sync full report to ClawVault
tasktime sync --days 30             # Sync last 30 days
tasktime export                     # Export as markdown
tasktime stop --no-vault            # Skip auto-save for one task

Demo Data

tasktime seed                       # Seed sample data (empty DB only)

Use Cases for Agents

Benchmarking Learning

Track how long similar tasks take over time to measure learning progression:

tt start "Implement OAuth flow" -c auth
# ... do the work ...
tt stop --notes "Used passport.js, took 20min less than last time"

Sync to ClawVault

Persist task data to your agent's memory vault:

# After completing work
tasktime sync

# Or pipe export to clawvault
tasktime export | clawvault store --category research --title "Task Report"

Learn more: clawvault.dev

Category-Based Analytics

Group tasks to understand time allocation:

tt report --days 7
# Shows time breakdown by category: coding, research, testing, docs, etc.

Quick Status for Prompts

Add current task to your shell prompt:

PS1='$(tasktime now) \$ '
# Shows: ⏱️ Build API (23m) $

Data Storage

• Location: ~/.tasktime/tasks.json
• Format: JSON (portable, human-readable)
• No external dependencies or databases

Related

• ClawVault — Memory system for AI agents
• OpenClaw — AI agent platform

Aliases

• tasktime → Full command
• tt → Short alias (same functionality)