clockify
Enables teams and individuals to track time efficiently with features for logging entries, generating reports, and managing projects.
Install this skill
or
51/100
Security score
The clockify skill was audited on Feb 12, 2026 and we found 9 security issues across 4 threat categories, including 2 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 13
Piping content to bash shell
SourceSKILL.md
| 13 | curl -sSL https://canifi.com/skills/clockify/install.sh | bash |
high line 27
Piping content to bash shell
SourceSKILL.md
| 27 | # curl -sSL https://canifi.com/install.sh | bash |
medium line 13
Curl to non-GitHub URL
SourceSKILL.md
| 13 | curl -sSL https://canifi.com/skills/clockify/install.sh | bash |
medium line 27
Curl to non-GitHub URL
SourceSKILL.md
| 27 | # curl -sSL https://canifi.com/install.sh | bash |
medium line 90
Webhook reference - potential data exfiltration
SourceSKILL.md
| 90 | 4. Webhook support |
low line 18
Access to hidden dotfiles in home directory
SourceSKILL.md
| 18 | cp -r skills/clockify ~/.canifi/skills/ |
low line 13
External URL reference
SourceSKILL.md
| 13 | curl -sSL https://canifi.com/skills/clockify/install.sh | bash |
low line 23
External URL reference
SourceSKILL.md
| 23 | Configure via [canifi-env](https://canifi.com/setup/scripts): |
low line 27
External URL reference
SourceSKILL.md
| 27 | # curl -sSL https://canifi.com/install.sh | bash |
Scanned on Feb 12, 2026
View Security Dashboard