PomoClaw

PassAudited by ClawScan on May 1, 2026.

Overview

PomoClaw appears to be a coherent timer-control skill, with modest notes around running a local URL-scheme command, using an external app download, and optionally enabling launch at login.

This skill looks appropriate for controlling a local Pomodoro timer. Before installing or using it, verify the external PomoClaw app source, and be aware that it can run local open commands for pomoclaw:// URLs and optionally configure the app to start at login.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may run a local command to start, pause, stop, or query the timer when the user asks.

Why it was flagged

The skill uses a local command-execution tool to invoke the timer app, which is expected for controlling a macOS URL scheme but is still worth noting.

Skill content
Run via `nodes.run` on the Mac node using `bash -c "open 'pomoclaw://...'"`
Recommendation

Use the skill only for timer-related requests and avoid broadening the command pattern beyond the documented pomoclaw:// URLs.

What this means

Users need to ensure the external PomoClaw app they install is the intended one.

Why it was flagged

The skill relies on a separately installed external app from a latest-release link rather than an included or pinned install artifact.

Skill content
**Download:** https://github.com/vkozlovskyi/PomoClaw/releases/latest
Recommendation

Verify the GitHub project and release before installing the app, especially because the registry metadata lists no homepage or install spec.

What this means

If used, the PomoClaw app may continue launching automatically after restarts or new logins.

Why it was flagged

The skill documents a configuration command that can make the timer app start automatically at login; this is disclosed and related to the app's purpose.

Skill content
pomoclaw://config?launchAtLogin=true # Enable launch at login
Recommendation

Only enable launch at login if the user explicitly wants the timer app to persist across sessions.