cron
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions create a surface for indirect prompt injection by directing the agent to translate natural language user input into structured arguments for the
crontool. - Ingestion points: User-provided scheduling requests and task descriptions are processed in
SKILL.md. - Boundary markers: There are no instructions for the agent to use delimiters or ignore embedded instructions within the natural language task descriptions.
- Capability inventory: The skill utilizes the
crontool to add, list, and trigger tasks. - Sanitization: The instructions do not specify any validation, filtering, or escaping for the user-provided
taskargument before it is passed to the tool.
Audit Metadata