Wakatime Lite

Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Wakatime Lite concepts, best practices, and implementation patterns.

Security Scan

The skill is internally consistent: it provides local reference text and the included shell script simply emits documentation; it does not request credentials, make network calls, or perform unexpected actions.

Purpose & Capability

The name/description match the contents. The SKILL.md promises a reference/cheat-sheet and the included scripts produce static documentation via heredoc. There are no unrelated binaries, credentials, or config paths required.

Instruction Scope

SKILL.md explicitly states no external API calls or credentials and the script implements only local heredoc outputs. Minor, non-security issues: the quickstart text generically mentions 'Required tools and access credentials' (likely a template artifact) and the script's internal VERSION (2.0.2) differs from the SKILL.md version (2.0.3). Neither changes the runtime behavior, but they are small inconsistencies worth noting.

Install Mechanism

No install spec is provided (instruction-only), so nothing is downloaded or written to disk by an installer. A script file is included but it contains only static output logic and no network or exec of untrusted code.

Credentials

The skill declares no required environment variables, no primary credential, and the code does not read env vars or secret-like values. Requested access is proportionate to a local reference tool.

Persistence & Privilege

always is false and the skill does not request persistent presence or modify other skill/system configurations. It does not attempt to persist credentials or change agent-wide settings.

Assessment

This appears to be a low-risk, read-only reference skill. If you plan to install it, note the minor documentation inconsistencies (version mismatch and a generic mention of 'access credentials' in the quickstart). Before allowing any agent to execute the included script, you may want to: (1) preview the script (it's short and human-readable) to confirm it only prints text, (2) avoid granting the agent network or elevated filesystem permissions unless needed, and (3) treat it as a local reference tool — there are no hidden endpoints or credential requirements. If you require absolute assurance, run the script in an isolated environment to observe behavior.

Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Wakatime Lite concepts, best practices, and implementation patterns. No API keys or credentials required.

Commands

Command	Description
intro	intro reference
quickstart	quickstart reference
patterns	patterns reference
debugging	debugging reference
performance	performance reference
security	security reference
migration	migration reference
cheatsheet	cheatsheet reference

Output Format

All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access.

---

Powered by BytesAgain | bytesagain.com | [e-mail]