Skip to main content

kimai-time-tracking

Integrates Kimai time-tracking API for managing timesheets, projects, and invoices, enhancing workflow efficiency and reporting.

Install this skill

or
85/100

Security score

The kimai-time-tracking skill was audited on Feb 19, 2026 and we found 7 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 41

Access to hidden dotfiles in home directory

SourceSKILL.md
41- `KIMAI_WORKSPACE` - Path for exports/temp files (defaults to `~/.openclaw/workspace/kimai`)
medium line 187

Access to hidden dotfiles in home directory

SourceSKILL.md
187- All file exports (CSV, JSON) default to `KIMAI_WORKSPACE` or `~/.openclaw/workspace/kimai`.
low line 8

External URL reference

SourceSKILL.md
8Complete API integration for [Kimai](https://www.kimai.org/) time-tracking software. Enables full control over timesheets, projects, customers, activities, teams, invoices, and system configuration.
low line 37

External URL reference

SourceSKILL.md
37- `KIMAI_BASE_URL` - Full URL to Kimai instance (e.g., `https://kimai.example.com`)
low line 276

External URL reference

SourceSKILL.md
276export KIMAI_BASE_URL="https://your-kimai.example.com"
low line 283

External URL reference

SourceSKILL.md
283- Kimai REST API Docs: https://www.kimai.org/documentation/rest-api.html
low line 284

External URL reference

SourceSKILL.md
284- Pagination Guide: https://www.kimai.org/documentation/api-pagination.html
Scanned on Feb 19, 2026
View Security Dashboard