crontap-replace-vercel-cron

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides an example using curl to interact with the Crontap REST API (api.crontap.com). This is a documented method for users to manage their schedules via the command line.
  • [DATA_EXFILTRATION]: The skill performs network operations targeting the vendor's API at api.crontap.com. These operations are used to create and update cron schedules, which involves sending schedule metadata (URLs, intervals, and authorization headers) to the Crontap service.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests configuration data from external files and environment details.
  • Ingestion points: The agent is instructed to read the existing vercel.json file and confirm production hostname/route details.
  • Boundary markers: There are no specific delimiters or "ignore embedded instructions" warnings for the data read from configuration files.
  • Capability inventory: The skill leverages the curl command and MCP tools (create_schedule, pause_schedule, resume_schedule) to create or modify external scheduling resources.
  • Sanitization: The skill does not implement specific sanitization or validation steps for the data ingested from vercel.json or user-provided hostnames.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:07 AM