headless-cron-creator
Fail
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's primary function is to generate and install bash scripts into the system's crontab utility. This establishes long-term persistence, enabling automated execution of code on the host machine without active user involvement.\n- [PROMPT_INJECTION]: User-provided strings for job names and task prompts are embedded directly into shell commands and generated scripts. This creates a vulnerability surface for command injection if the underlying generator script does not sufficiently sanitize these inputs against shell metacharacters.\n- [COMMAND_EXECUTION]: The skill relies on executing a local Python script (~/.claude/scripts/crontab-manager.py) to perform sensitive operations such as modifying the system crontab and generating executable files.
Recommendations
- AI detected serious security threats
Audit Metadata