clockify-api

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard command-line tools (curl, jq) and the 1Password CLI (op) to interact with APIs. This architectural choice ensures that sensitive credentials are never stored in plain text or hardcoded within scripts.
  • [EXTERNAL_DOWNLOADS]: The scripts/main.py script is used to fetch OpenAPI specifications directly from official Clockify domains (docs.clockify.me, api.clockify.me).
  • [DATA_EXFILTRATION]: All network operations are directed at official Clockify infrastructure. The skill instructions contain explicit prohibitions against exposing API keys in output or persisting them insecurely.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 05:15 AM