ClawTime
PassAudited by ClawScan on May 1, 2026.
Overview
ClawTime’s instructions are mostly coherent for operating its webchat UI, task panel, and avatars, with a few purpose-aligned behaviors users should notice.
This skill appears coherent for operating ClawTime. Before installing or using it, review the missing INSTALL.md from a trusted source, approve any service restart/log commands, and be careful with persistent task contents and custom avatar JavaScript.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may need to rely on external or missing setup instructions before using the service.
The skill points to setup and deployment instructions that are not included in the supplied one-file artifact set, so users cannot review those steps here.
For first-time setup (clone, configure, deploy), see **[INSTALL.md](./INSTALL.md)**.
Obtain and review INSTALL.md from a trusted ClawTime source before running any clone, configure, or deploy steps.
If an agent has shell access, it may be guided to inspect ClawTime logs or restart the user-level ClawTime service.
The skill documents local service-management and log-inspection commands for ClawTime.
systemctl --user status clawtime journalctl --user -u clawtime -f systemctl --user restart clawtime
Treat these as operational commands and approve restarts or log access only when they are relevant to the task.
Custom avatar files are executable JavaScript in the ClawTime UI context, so unsafe or untrusted avatar code could affect the interface.
Avatar creation involves writing JavaScript files that ClawTime is expected to load for custom 3D avatars.
Create at `~/.clawtime/avatars/<name>.js`: ... `window.initAvatarScene = function() {`Only create or install avatar JavaScript you trust, and review generated avatar code before using it.
Stored tasks may persist across sessions and influence future agent behavior, and task contents could include private work details.
The skill establishes a persistent local task list that can be reused as authoritative context for future work.
ClawTime includes a task panel for tracking work. **Use this as your canonical task list.** ... Tasks stored at `~/.clawtime/tasks.json`
Keep sensitive information out of the task list unless you are comfortable storing it locally, and periodically review or clean stale tasks.