cron

SUSPICIOUS: The skill is purpose-aligned and shows no credential harvesting or hidden exfiltration, but its task mode grants autonomous recurring agent execution, which is a meaningful safety risk. Supply-chain risk is low-to-moderate due to third-party registry packaging, not the skill content itself.