Toggl

Track time with Toggl via the toggl CLI. Use when the user wants to start/stop time tracking, check current timer, view today's or weekly reports, list recent entries, or manage time entries. Triggers on "toggl", "time tracking", "timer", "track time", "what am I working on", "log time", "timesheet".

This skill is coherent for Toggl CLI integration, but review these points before installing: 1) The SKILL.md requires your Toggl API token (stored in ~/.toggl-cli.json or via TOGGL_API_TOKEN) even though the registry metadata lists no env vars—don't install or provide secrets unless you trust the package and maintainer. 2) The instructions ask you to run `npm install -g @beauraines/toggl-cli` (global npm install). Verify the package on npm and its source repository, and prefer installing locally or inspecting the package before global install. 3) Protect your API token: set file permissions (chmod 600) as suggested, and avoid pasting the token into untrusted UIs. 4) If you want the agent to act autonomously, ensure it has only the minimal token scope you are comfortable granting. If you want help verifying the npm package or reviewing alternatives, ask for additional checks.

Type: OpenClaw Skill Name: toggl Version: 1.0.0 The skill bundle is designed for Toggl time tracking, instructing the AI agent to install the `@beauraines/toggl-cli` tool and configure it with an API token. All instructions in `SKILL.md` are directly related to the stated purpose, providing legitimate commands for time management. There is no evidence of intentional harmful behavior such as data exfiltration, malicious execution (e.g., `curl|bash`), persistence mechanisms, obfuscation, or prompt injection attempts against the agent to perform actions outside the skill's scope. The handling of an API token and global package installation are necessary for the skill's functionality and are not indicative of malicious intent within this bundle.