Check accurate current time, date, and timezone information for any location worldwide using time.is. Use when the user asks "what time is it in X", "current time in Y", or needs to verify timezone offsets.
Security Analysis
high confidenceThe skill's code matches its stated purpose (scraping time.is) but its documentation and manifest are inconsistent (undeclared curl dependency and misleading library advice), so proceed with caution.
The skill claims to fetch time from time.is and the included script does exactly that. However, the manifest/README declare no required binaries while the script calls the external 'curl' binary via subprocess. SKILL.md also recommends installing 'requests' and 'beautifulsoup4', but the script does not use them (it uses curl + regex). These mismatches are incoherent with the stated requirements.
Runtime instructions are narrow and correctly limit actions to fetching and scraping time.is pages for a given location. The instructions do not request unrelated files, credentials, or external endpoints. Minor scope issues: persona guidance ('Mema/Azzar') is unrelated to runtime behavior, and troubleshooting suggests libraries not used by the script.
No install spec (lowest install risk). However, the script depends on the system 'curl' binary but the skill metadata does not declare this; that should be fixed. No remote downloads or archive extraction are present.
The skill requests no environment variables, credentials, or config paths and the script does not read any secrets or environment values. Network access to time.is is required but proportionate to the stated purpose.
The skill does not request permanent presence (always:false) and does not modify other skills or system settings. It runs only when invoked.
Guidance
This skill appears to do what it says (fetch the time from time.is) and makes only a network request to that site. However, the package metadata and documentation are inconsistent: the Python script uses the system 'curl' binary (via subprocess), but the metadata lists no required binaries and the README suggests installing 'requests' and 'beautifulsoup4' (which the script doesn't use). Before installing or enabling this skill: 1) confirm 'curl' is available on target systems or update the SKILL.md to declare it; 2) consider replacing subprocess+cURL+regex with a pure-Python HTTP+HTML parser (requests + BeautifulSoup) or at least document why curl is used; 3) review network policy — the skill will make outbound requests to time.is; 4) if you need stricter assurance, request the owner to correct the README/manifest and provide a small security review (e.g., ensure subprocess.run is used without shell=True and that location input is validated). The inconsistencies look like sloppy packaging rather than malicious intent, but fix the declared dependencies before use.
Latest Release
v1.0.0
Initial release of time-checker skill. - Provides accurate current time, date, and timezone details for any global location using time.is. - Supports simple queries like "what time is it in X" or "current time in Y". - Offers guidance on handling location input, script usage, and troubleshooting common errors. - Includes best practices for getting precise results and integrating time data into scheduling tasks.
More by @1999AZZAR
Published by @1999AZZAR on ClawHub
