Ramadan Times

PassAudited by ClawScan on May 10, 2026.

Overview

This skill appears purpose-aligned and non-malicious, but it calls an external sunset-time API and its documentation overstates some supported features.

This skill is reasonable to use for casual Ramadan time lookup, but check important times with a trusted local source. Be aware that it contacts sunrise-sunset.org with city coordinates, may need jq installed despite not declaring it, and its documentation appears broader than the provided script.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A third-party service may learn the city coordinates used for the Ramadan time calculation.

Why it was flagged

The script sends latitude and longitude for the selected/default city to a third-party API. This is disclosed and purpose-aligned, but users should know approximate location/city data is shared.

Skill content
result=$(curl -s "https://api.sunrise-sunset.org/json?lat=$lat&lng=$lng&formatted=0" 2>/dev/null)
Recommendation

Use an explicit city you are comfortable sharing, and verify times from a trusted local source if precision matters.

What this means

If jq is missing, the skill may silently fall back to hardcoded timing behavior and provide less accurate results.

Why it was flagged

The script invokes jq, but the declared required binaries only list curl and date. This is an undeclared runtime dependency rather than evidence of malicious behavior.

Skill content
sunset=$(echo "$result" | jq -r '.results.sunset' 2>/dev/null)
Recommendation

Declare jq as a requirement or remove the dependency; users should ensure jq is installed if they expect API-derived times.

What this means

Users may assume the skill is more complete or accurate than the provided implementation supports.

Why it was flagged

The included script contains a small fixed city table and outputs Turkish text, so the documentation appears to overstate coverage and multilingual support.

Skill content
- 🌍 Supports 100+ cities worldwide
- 🗣️ Multi-language: TR, EN, AR, DE, FR, ES, RU
Recommendation

Treat the skill as a limited helper, verify important prayer times independently, and update the documentation to match implemented behavior.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

A manually configured reminder could continue running daily until removed.

Why it was flagged

The documentation mentions cron-based reminders, which are persistent if a user manually installs them. The artifacts do not show automatic cron installation.

Skill content
Can be used for daily iftar reminder:
```
0 17 * * * - "İftara 2 saat kaldı!" reminder
```
Recommendation

Only add a cron reminder intentionally, and keep track of how to disable it after Ramadan or when no longer needed.