Deadline
PassAudited by ClawScan on May 1, 2026.
Overview
Deadline appears to be a benign offline command-line logger for content/deadline entries, with notes about persistent local history and an under-declared CLI install path.
Before installing, confirm the `deadline` command comes from the reviewed source. Treat the tool as a local persistent logger: do not enter secrets unless you intend them to be saved, and review or delete the data directory when needed.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You may need to verify which `deadline` command is being run and where it came from.
The artifacts include a Bash script and SKILL.md expects a `deadline` CLI, but the registry/install metadata does not declare how that binary is installed or invoked. This is a packaging/provenance ambiguity rather than evidence of hidden behavior.
Install specifications: No install spec — this is an instruction-only skill. Code file presence: scripts/script.sh
Install or invoke only the reviewed script from the trusted source, and check that your shell's `deadline` command points to the expected file.
Private drafts, deadlines, or other text you enter may remain on disk and may later be shown by recent/search/export commands.
The CLI creates a persistent local data directory and appends action names and user-provided text to history/log files.
DATA_DIR="${HOME}/.local/share/deadline"
mkdir -p "$DATA_DIR"
_log() { echo "$(date '+%m-%d %H:%M') $1: $2" >> "$DATA_DIR/history.log"; }Avoid entering secrets or sensitive private content unless you are comfortable storing it locally, and periodically review or delete files under `~/.local/share/deadline/`.