The Agent Skills Directory

[PERSISTENCE]: The skill is designed to create persistent background tasks via the system crontab, which allows code to run outside of the active agent session.
The skill automates the installation of crontab entries that are intended to be recurring and survive session termination.
Mitigation: The instructions require explicit user confirmation before modifying the crontab and use a tagging system for safe management and removal of entries.
[COMMAND_EXECUTION]: The skill uses the Bash tool to execute Python scripts and shell commands for generating and validating cron wrapper scripts.
User-provided parameters like name, prompt, and schedule are interpolated into shell command strings during script generation and crontab installation.
The skill incorporates bash -n for syntax checking of the generated scripts to prevent accidental execution of malformed code.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input which is then embedded into executable shell scripts, creating a potential injection surface.
Ingestion points: The name, prompt, and schedule arguments provided by the user in the SKILL.md parsing phase.
Boundary markers: The instructions in Phase 4 explicitly require the agent to display the proposed crontab entry and wait for human confirmation before final installation.
Capability inventory: The skill uses the Bash tool to run the crontab-manager.py helper and the Write tool to create the wrapper scripts.
Sanitization: Instructions suggest using bash heredocs to prevent escaping issues and mandate safety flags like set -euo pipefail and budget caps in the generated scripts.
[DYNAMIC_EXECUTION]: Generates shell wrapper scripts at runtime based on user-supplied task descriptions.
The skill writes a .sh file and then schedules it for execution, which is a form of dynamic script generation.
The process is managed via a template-based generation tool (crontab-manager.py generate-wrapper) which reduces the risk of arbitrary code injection compared to manual script construction.

headless-cron-creator