cron-creator

SUSPICIOUS. The skill’s purpose and capabilities mostly align, and there is no clear credential harvesting or exfiltration path. However, the unpinned raw GitHub installer, lack of release verification, and installer-side expansion of Clawdbot exec capability make the install trust model weak enough to treat as medium risk rather than benign.