activitywatch-integration
Warn
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone source code from third-party repositories, including
github.com/Auriora/activitywatch-mcp.git. While it also references the well-knownActivityWatchorganization, the third-party reference introduces external dependencies. - [REMOTE_CODE_EXECUTION]: Setup instructions involve running
npm installandpip install .on locally cloned repositories. These operations can execute arbitrary code or lifecycle scripts defined in the external source code during the installation process. - [COMMAND_EXECUTION]: The guide includes several shell commands for managing the environment, such as
pkillto terminate server and watcher processes,chmodto modify permissions on application data folders, and instructions for persistence viacronto schedule automated data synchronization and reporting tasks.
Audit Metadata