cron-scheduler
Warn
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: MEDIUMPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill's core functionality involves modifying persistent system schedulers including
crontab,OpenClaw cron, andRailway cronto maintain task execution across sessions. - [COMMAND_EXECUTION]: The skill generates and executes shell commands, specifically invoking the
gbrain syncutility with flags such as--paralleland--workersto perform bulk synchronization tasks. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing job configurations that may ingest untrusted data, creating a potential surface for indirect injection.
- Ingestion points: Job definitions including user-provided names, cron expressions, and target skill paths referenced in
SKILL.md. - Boundary markers: There are no explicit delimiters or "ignore instructions" warnings described to prevent the agent from executing instructions embedded within the referenced job skills.
- Capability inventory: The skill utilizes
put_pagefor file modification,crontabfor persistence, and thegbrainCLI for task execution. - Sanitization: The skill lacks explicit sanitization or validation logic for job parameters before they are used in shell command construction or scheduling registration.
Audit Metadata