crontap-replace-vercel-cron
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides an example using
curlto interact with the Crontap REST API (api.crontap.com). This is a documented method for users to manage their schedules via the command line. - [DATA_EXFILTRATION]: The skill performs network operations targeting the vendor's API at
api.crontap.com. These operations are used to create and update cron schedules, which involves sending schedule metadata (URLs, intervals, and authorization headers) to the Crontap service. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests configuration data from external files and environment details.
- Ingestion points: The agent is instructed to read the existing
vercel.jsonfile and confirm production hostname/route details. - Boundary markers: There are no specific delimiters or "ignore embedded instructions" warnings for the data read from configuration files.
- Capability inventory: The skill leverages the
curlcommand and MCP tools (create_schedule,pause_schedule,resume_schedule) to create or modify external scheduling resources. - Sanitization: The skill does not implement specific sanitization or validation steps for the data ingested from
vercel.jsonor user-provided hostnames.
Audit Metadata