FocusTimer Pomodoro Timer via Agent
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a straightforward Pomodoro timer skill that stores focus session history locally and shows no evidence of credential use, network transmission, or hidden execution.
This skill looks safe for normal Pomodoro tracking. Before using it, be aware that task names and session times are saved locally in a JSON file, so avoid recording sensitive project details if that local history would be a privacy concern.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your focus topics and work-session timestamps may remain on disk locally after use.
The implementation stores focus sessions, including task labels and timing data, in a local JSON file so it can generate reports.
this.dataFile = options.dataFile || './focus-data.json'; ... fs.writeFileSync(this.dataFile, JSON.stringify(this.sessions, null, 2));
Avoid putting highly sensitive details in task names, and delete or relocate the local focus-data.json file if you do not want this history retained.