activitywatch-integration

Warn

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone source code from third-party repositories, including github.com/Auriora/activitywatch-mcp.git. While it also references the well-known ActivityWatch organization, the third-party reference introduces external dependencies.
  • [REMOTE_CODE_EXECUTION]: Setup instructions involve running npm install and pip install . on locally cloned repositories. These operations can execute arbitrary code or lifecycle scripts defined in the external source code during the installation process.
  • [COMMAND_EXECUTION]: The guide includes several shell commands for managing the environment, such as pkill to terminate server and watcher processes, chmod to modify permissions on application data folders, and instructions for persistence via cron to schedule automated data synchronization and reporting tasks.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 3, 2026, 08:38 AM
Security Audit — agent-trust-hub — activitywatch-integration