clockify-init

clockify-init is a skill for Claude Code, Cursor from dustinestes/clockify-agent-plugin. It costs 86 tokens per session (1,509 once invoked), scanned A, original, MIT.

A setup workflow for connecting a git repository to Clockify, a time-tracking service. It asks how the repository should map to Clockify projects and tasks, then stores the choice in a personal, ignored configuration file.

In plain words
What is it for?
Authenticating Clockify, choosing a repository-to-project/task structure, writing .clockify/config.yml, ignoring personal tracking files, and creating the matching Clockify project or tasks when selected.
Why use it?
It creates the shared configuration needed by the repository’s time-tracking workflows while keeping personal tracking details out of the product repository.

Skill for Claude CodeCursor

Written for Claude Code and Cursor: disable-model-invocation in frontmatter, but also shipped in a Cursor plugin. Also seen: mentions Cursor.

Part of the clockify-agent-plugin plugin — 12 skills, 1 MCP server shipped together

Good fit Authenticating Clockify, choosing a repository-to-project/task structure, writing .clockify/config.yml, ignoring personal tracking files, and creating the matching Clockify project or tasks when selected.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/dustinestes/clockify-agent-plugin/clockify-init
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add dustinestes/clockify-agent-plugin --skill clockify-init
Clone the repo
git clone --depth 1 https://github.com/dustinestes/clockify-agent-plugin

Made for: Claude Code, Cursor.

Or install clockify-agent-plugin, the plugin that ships this one along with the rest of its 12 skills, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for clockify-init

README.md
[![agentmods](https://agentmods.dev/badge/skills/dustinestes/clockify-agent-plugin/clockify-init/github.svg)](https://agentmods.dev/skills/dustinestes/clockify-agent-plugin/clockify-init)
Your own site
<a href="https://agentmods.dev/skills/dustinestes/clockify-agent-plugin/clockify-init"><img src="https://agentmods.dev/badge/skills/dustinestes/clockify-agent-plugin/clockify-init/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for clockify-init

Your own site · 80×15
<a href="https://agentmods.dev/skills/dustinestes/clockify-agent-plugin/clockify-init"><img src="https://agentmods.dev/badge/skills/dustinestes/clockify-agent-plugin/clockify-init.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 86 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,509 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00086 $0.01509
Opus 5.5 $0.00034 $0.00604
Sonnet 5.5 $0.00017 $0.00302
Haiku 4.5 $0.00009 $0.00151

Measured 1mo ago against content hash 7f59c3d3611b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

clockify-init scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/clockify-init/SKILL.md · 88 lines

How it starts

The opening of the file, as written. The whole thing — 88 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Clockify init

Pin a workspace and write the v4 base contract so timer and enter-time share one yaml. Config is personal by default (gitignored). Decision map: flows.md.

Next mode: clockify-automate runs the forge + Cursor platforms wizards and writes rules. Do not write those here.

Config root

Pass config_root (absolute git toplevel, or folder root when not a git repo) on Clockify MCP calls. If it is already known this session and still this repo, reuse it — do not run git before every tool. Otherwise resolve once:

  1. git rev-parse --show-toplevel from the working directory (no path argument). Open editor tabs are not required.
  2. If that fails, the same command from the folder this Cursor window opened.
  3. Multi-root .code-workspace only: git-toplevel the focused file or explorer folder.
  4. Still ambiguous: ask which root, or look for .clockify/config.yml under each root. Do not guess the .code-workspace parent.
  5. Non-git: if git rev-parse fails, use the folder this Cursor window opened (or the focused folder in a multi-root workspace) as config_root. Do not block init — folder name is the local_folder fallback.

Re-resolve when the user switches folders or the focused root changes.

Idempotency

Re-runs are expected (including from clockify-automate). Treat existing setup as authoritative:

  1. Confirm MCP auth: clockify_get_user with config_root (fix if missing API key).
  2. Detect local folder name from that git toplevel (folder name), or the non-git folder name from step 5 above. Do not use Cursor’s workspace folder when it is a multi-root .code-workspace parent.
  3. If .clockify/config.yml exists (or clockify_get_config with config_root returns found: true at that path):
    • Do not rewrite config, .managed-by-init, or .clockify/.gitignore unless the user explicitly asks to reset/overwrite.
    • Do not re-prompt for scope.workspace_id when config already exists unless the user asks to change it.
    • Only fill missing ignore pieces (Always step), then jump to verify + end message.
  4. Otherwise continue with first-time bootstrap below.

Read the full file on GitHub · 88 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed 7f59c3d3611b
  2. 1mo ago Changed · -79 lines · -25 tokens per session 624cac3b75f9
  3. 1mo ago Changed · +23 lines 33ed55dc29ee
  4. 1mo ago First seen · 144 lines · 111 tokens per session scan A 0a8953ad7a65

Subscribe to this mod's changes

clockify-init is a skill published in the GitHub repository dustinestes/clockify-agent-plugin (0 stars, last pushed 1mo ago), licensed MIT. It adds 86 tokens to every session and 1,509 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

smartsheet-rm

Enterprise Agent Skill for orchestrating Resource Management by Smartsheet (10,000ft API) — manage weekly timesheets, reconciliation, project staffing, assignments, capacity planning, and user availability.

christianclaudio/mcp-server-smartsheet-rm · 45 tokens

beebole-usage

Guía para manejar bien el MCP de Beebole (control de horas). Úsala SIEMPRE que el trabajo implique Beebole o cualquier tool beebole — fichar/consultar horas, proyectos, tareas, personas, timesheets (aprobar/rechazar) o informes de dedicación y rentabilidad. Explica el flujo correcto (curadas → search/describe/…

NeoNexAI/beebole-mcp · 166 tokens

workspace-builder

Build ServiceNow App Engine Studio applications — sysscope creation, scoped tables, sysawworkspace with lists/forms, the sysux record chain behind UI Builder workspaces, data brokers, and application export readiness checks. Never create a UI Builder page by inserting a sysuxpage row.

serac-labs/serac · 62 tokens

change-management

Create and transition ServiceNow change requests (normal/standard/emergency), change tasks, affected CIs, approval routing, CAB scheduling, and conflict detection across maintenance windows.

serac-labs/serac · 37 tokens

incident-management

Manage ServiceNow incidents — creation with impact/urgency priority calc, auto-assignment by category, reassignment tracking, major incident declaration with bridge calls, time-based escalation, MTTR metrics.

serac-labs/serac · 42 tokens

problem-management

Manage ServiceNow problems — create from linked incidents, proactive pattern detection, RCA with 5-Whys, knownerror workarounds (KEDB), KEDB search by CI/category/keywords, and permanent-fix linkage to changes.

serac-labs/serac · 53 tokens