scheduler for discord

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says by creating scheduled Discord reminders or posts, but users should verify recurring schedules and channel targets because posts can happen later.

Before installing, make sure you are comfortable with Moltbot creating jobs that can post to Discord after the chat ends. For recurring jobs, confirm the destination channel ID, schedule, timezone, message content, and how to list or cancel the job.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill enables persistent background jobs that can post messages to a Discord channel later, but it does not require explicit user confirmation, visibility into persistence, or safeguards against accidental long-lived posting. This is dangerous because users may unintentionally authorize recurring or delayed actions that continue after the original conversation, leading to unwanted channel spam, confusion, or abuse if the request was ambiguous or maliciously framed.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal