skills/tkersey/dotfiles/cron/Gen Agent Trust Hub

cron

Warn

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads source code from https://github.com/tkersey/skills-zig using git clone and utilizes Homebrew to install a tap from tkersey/tap/cron.
  • [REMOTE_CODE_EXECUTION]: The run_cron_tool function executes zig build on the cloned source code to produce a binary, which is then installed and executed on the user's system.
  • [COMMAND_EXECUTION]: The skill executes various shell commands to manage files and system state, including mkdir, install -m 0755 for binary installation, and direct binary execution for automation management.
  • [PERSISTENCE]: The skill includes functionality to install a launchd scheduler on macOS by creating and managing files in ~/Library/LaunchAgents/, enabling persistent background execution of the automation runner.
Audit Metadata
Risk Level
MEDIUM
Analyzed
May 15, 2026, 12:53 PM
Security Audit — agent-trust-hub — cron