Cron Setup

• Analyzed: May 11, 2026, 4:47 AM
• Findings: 1
• Version: 1.0.0
• Hash: b31d3c29299c2d893505f8c6ddc5189ee35b28367643f049729acc8a2c9d5c7b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to a critical vulnerability that enables arbitrary command execution (RCE). The `SKILL.md` file, under 'Task Instruction Conventions', explicitly instructs the AI agent to 'Be explicit with commands — Give the cron agent exact bash commands to run.' This directive allows any `payload.message` within a cron job to execute arbitrary shell commands without apparent sanitization or sandboxing, posing a significant security risk. While the stated purpose is to manage cron jobs, this instruction creates a direct path for malicious execution if a compromised or malicious cron job payload is introduced.