Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Jewish Zmanim Calculator

v1.0.0

Calculate Halachic times (zmanim) for any location and date. Sunrise, sunset, dawn, dusk, candle lighting, Shabbos times, Daf Yomi, and all major zmanim. Use...

0· 28·0 current·0 all-time
byAbraham Perl@abeperl

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for abeperl/zmanim-calculator.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Jewish Zmanim Calculator" (abeperl/zmanim-calculator) from ClawHub.
Skill page: https://clawhub.ai/abeperl/zmanim-calculator
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: python3, pip3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install zmanim-calculator

ClawHub CLI

Package manager switcher

npx clawhub@latest install zmanim-calculator
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
Name/description (zmanim via Hebcal/NOAA/GeoNames, IP auto-detect, config file) partially matches the actual code: the script calls the Hebcal API which is appropriate, but it does not implement NOAA algorithms, GeoNames lookups, IP-based geolocation, or reading the ~/.config/zmanim/default.json referenced in SKILL.md. The SKILL.md's suggested pip dependencies (hebcal-python, python-dateutil) are not used by the script. These mismatches mean the documentation promises capabilities and dependencies that aren't present.
!
Instruction Scope
SKILL.md instructs installing extra Python packages, creating a config file, and says 'auto-detected IP' for location; none of these are used by scripts/zmanim.py. The script only uses local hard-coded city lookups and HTTP calls to Hebcal. The instructions thus overreach and are inaccurate, which could mislead the agent or user into expecting broader behaviour.
Install Mechanism
There is no install spec (lowest risk). SKILL.md suggests pip installs, but the shipped script runs without those dependencies. No external installers or archive downloads are used. Risk from install mechanism itself is low, but the documentation recommending unnecessary packages is inconsistent.
Credentials
The skill declares no required environment variables, no credentials, and requests only python3/pip3 binaries — which is proportionate for a Python script. The script does perform outbound network calls (Hebcal over HTTPS and an unused GEONAMES_API constant), but does not request or read secrets or system config.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system privileges or modify other skills. It is user-invocable and can be invoked autonomously by the agent (platform default). There is no evidence of attempts to persist credentials or alter global agent configuration.
What to consider before installing
This skill's core behavior — calling Hebcal to get zmanim — is coherent and the code is readable. However the SKILL.md claims extra features (NOAA algorithms, GeoNames lookup, IP auto-detection, a ~/.config file, and extra pip packages) that are not implemented in the included script. Before installing or granting automatic invocation: 1) If you expect IP-based location, NOAA-based calculations, or GeoNames lookups, do not rely on this skill — ask the author to implement or remove those claims. 2) The script makes outbound HTTPS requests to hebcal.com (and contains an unused GEONAMES_API URL); consider whether you are comfortable with network requests from this skill. 3) The suggested pip packages are unnecessary for the provided script — installing them is optional but unnecessary. 4) If you want configuration via ~/.config/zmanim/default.json, verify the script is updated to actually read it. Overall the code itself isn't obviously malicious, but the documentation is misleading — treat it as untrusted until the author clarifies or the code is updated to match the docs.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🕯️ Clawdis
Binspython3, pip3
halachavk97dm5bt9h6n47fa2871q4nqz185mt8fjewishvk97dm5bt9h6n47fa2871q4nqz185mt8flatestvk97dm5bt9h6n47fa2871q4nqz185mt8ftorahvk97dm5bt9h6n47fa2871q4nqz185mt8fzmanimvk97dm5bt9h6n47fa2871q4nqz185mt8f
28downloads
0stars
1versions
Updated 8h ago
v1.0.0
MIT-0

Zmanim Calculator

Calculate Halachic times for any location and date. Powered by the hebcal Python library and NOAA sunrise/sunset algorithms.

Quick Start

# Today's zmanim for current location (auto-detected IP)
zmanim today

# Shabbos times for a specific city
zmanim shabbos --city "New York, NY"

# Full zmanim table for a date
zmanim --date 2026-05-15 --lat 40.7128 --lon -74.0060

# Candle lighting time
zmanim candles --city "Jerusalem"

# Daf Yomi for today
zmanim daf

# Weekly parsha
zmanim parsha

Commands

CommandDescriptionExample
zmanim todayAll zmanim for todayzmanim today
zmanim shabbosShabbos entry/exit timeszmanim shabbos --city "Brooklyn, NY"
zmanim candlesCandle lighting timezmanim candles --zip 11230
zmanim --date YYYY-MM-DDZmanim for specific datezmanim --date 2026-06-01
zmanim --lat X --lon YZmanim for coordinateszmanim --lat 31.7683 --lon 35.2137
zmanim dafToday's Daf Yomizmanim daf
zmanim parshaThis week's parshazmanim parsha
zmanim yomtovUpcoming Yom Tov dateszmanim yomtov

Output Format

📅 Zmanim for Brooklyn, NY — Friday, May 15, 2026
───────────────────────────────────────────────
🕯️ Candle Lighting (18 min):  7:42 PM
🌅 Shkiah (Sunset):           8:02 PM
🌙 Tzeis (72 min):            9:14 PM
🌄 Dawn (Alos HaShachar):     4:12 AM
☀️ Netz HaChamah (Sunrise):   5:42 AM
📖 Sof Zman Shema (Gra):      9:24 AM
📖 Sof Zman Shema (M'A):      8:48 AM
🕰️ Chatzos (Midday):          12:52 PM
🕰️ Mincha Gedolah:           1:12 PM
🕰️ Mincha Ketanah:           4:52 PM
🕰️ Plag HaMincha:            6:27 PM
🌅 Shkiah:                    8:02 PM

Installation

pip3 install hebcal-python python-dateutil

Or use the bundled script (no dependencies):

python3 scripts/zmanim.py --city "New York, NY"

API

from scripts.zmanim import get_zmanim, get_shabbos_times, get_daf_yomi

# Get all zmanim for a location
times = get_zmanim(lat=40.7128, lon=-74.0060, date="2026-05-15")
print(times['candle_lighting'])

# Shabbos times
shabbos = get_shabbos_times(city="Brooklyn, NY")
print(f"Candles: {shabbos['candle_lighting']}")
print(f"Havdalah: {shabbos['tzeis_72']}")

# Daf Yomi
daf = get_daf_yomi()
print(f"Today: {daf['tractate']} {daf['daf']}")

Configuration

Create ~/.config/zmanim/default.json:

{
  "default_city": "Brooklyn, NY",
  "candle_lighting_minutes": 18,
  "tzeis_minutes": 72,
  "timezone": "America/New_York"
}

Data Sources

  • Hebcal API — Jewish calendar calculations
  • NOAA — Sunrise/sunset algorithms
  • GeoNames — City-to-coordinates lookup

Limitations

  • Location lookup requires internet (or cached coordinates)
  • Extreme latitudes (near poles) may have edge cases
  • Yom Tov dates use Hebrew calendar; verify against local minhag

Comments

Loading comments...