Ramadan Times

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: ramadan-times Version: 1.0.0 The skill is a legitimate utility for providing Ramadan prayer and fasting times. The shell script (scripts/ramadan.sh) uses a hardcoded list of coordinates to query a public API (sunrise-sunset.org) and performs basic time calculations using standard system utilities. There is no evidence of data exfiltration, command injection, or malicious instructions in the SKILL.md file.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A third-party service may learn the city coordinates used for the Ramadan time calculation.

Why it was flagged

The script sends latitude and longitude for the selected/default city to a third-party API. This is disclosed and purpose-aligned, but users should know approximate location/city data is shared.

Skill content
result=$(curl -s "https://api.sunrise-sunset.org/json?lat=$lat&lng=$lng&formatted=0" 2>/dev/null)
Recommendation

Use an explicit city you are comfortable sharing, and verify times from a trusted local source if precision matters.

What this means

If jq is missing, the skill may silently fall back to hardcoded timing behavior and provide less accurate results.

Why it was flagged

The script invokes jq, but the declared required binaries only list curl and date. This is an undeclared runtime dependency rather than evidence of malicious behavior.

Skill content
sunset=$(echo "$result" | jq -r '.results.sunset' 2>/dev/null)
Recommendation

Declare jq as a requirement or remove the dependency; users should ensure jq is installed if they expect API-derived times.

What this means

Users may assume the skill is more complete or accurate than the provided implementation supports.

Why it was flagged

The included script contains a small fixed city table and outputs Turkish text, so the documentation appears to overstate coverage and multilingual support.

Skill content
- 🌍 Supports 100+ cities worldwide
- 🗣️ Multi-language: TR, EN, AR, DE, FR, ES, RU
Recommendation

Treat the skill as a limited helper, verify important prayer times independently, and update the documentation to match implemented behavior.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

A manually configured reminder could continue running daily until removed.

Why it was flagged

The documentation mentions cron-based reminders, which are persistent if a user manually installs them. The artifacts do not show automatic cron installation.

Skill content
Can be used for daily iftar reminder:
```
0 17 * * * - "İftara 2 saat kaldı!" reminder
```
Recommendation

Only add a cron reminder intentionally, and keep track of how to disable it after Ramadan or when no longer needed.