PomoClaw

Control the PomoClaw pomodoro timer on the Mac. Use when the user asks to start, stop, pause a pomodoro/pomoclaw/focus timer, check timer status, or when a p...

This skill appears coherent for controlling a macOS menu‑bar pomodoro app, but verify a few practical things before installing: (1) Confirm you have the PomoClaw app installed from the referenced GitHub releases and trust that source. (2) Ensure the agent will run commands on a macOS node (the SKILL.md relies on the macOS `open` command) — the registry entry does not declare an OS restriction. (3) Understand the skill will read ~/.pomoclaw/status.json after a status call; inspect that file for any sensitive info and confirm its permissions. (4) If you want to avoid accidental autonomous use, keep the skill user-invocable only (default) or restrict agent invocation policies. (5) If you need greater assurance, review the app binary/source on the GitHub repo before use.

Type: OpenClaw Skill Name: pomoclaw Version: 1.0.0 The skill is classified as suspicious because its `SKILL.md` instructions explicitly direct the AI agent to execute shell commands using `bash -c` and read local files using `cat`. While these actions are intended for benign purposes (controlling a pomodoro timer via URL scheme and reading its status file), they expose the agent to powerful primitives that could be exploited via prompt injection by a malicious user to execute arbitrary commands or read sensitive files beyond the skill's stated purpose. There is no evidence of intentional malicious behavior within the skill itself, but it demonstrates and enables risky capabilities for the agent.