Security audit
World Clock Pro: Time & Timezone Converter
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward world clock integration that uses a public read-only service for timezone and time conversion answers.
Before installing, understand that timezone questions may be sent to worldclock.pro over the network. The skill does not request credentials or local system access, and its behavior is limited to read-only time and timezone lookups.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.