Let Me Know
Analysis
This is mostly a notification helper, but it asks the agent to create background heartbeat jobs and, in one failure case, restart the gateway, which is broader authority than a simple update skill needs.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
只有在必须脱离当前执行流时才用 cron 心跳 ... 通过 `cron add` 创建心跳 job ... 创建后把返回的 **heartbeatJobId** 写入状态文件 ... 在任务**成功/失败的 finally** 里调用 `cron remove <heartbeatJobId>`
The skill can create a scheduled background heartbeat job that persists outside the immediate turn. It does include cleanup and deduplication requirements, so this is purpose-aligned but still worth user attention.
Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.
If cron removal fails due to gateway timeout, retry removal; if still stuck, use gateway restart (requires `commands.restart: true`) and retry.
Restarting a gateway is a privileged, high-impact action and is not clearly necessary for a notification-only skill. The instruction does not require explicit user confirmation before using that capability.