Cron表达式解析器

• Risk level: Low
• Analyzed: May 2, 2026, 4:44 AM
• Findings: 1
• Version: 1.2.5

Overview

This skill appears to be a straightforward local Cron expression parser, with only a minor dependency/provenance note for the optional next-run feature.

This skill is safe to consider for local Cron expression parsing. Before using the --next feature, verify and install the croniter dependency from a trusted source; otherwise, the included code does not show suspicious behavior.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Low

What this means

If the user chooses to install croniter, they rely on the external package source and version selected at install time.

Why it was flagged

The optional next-run calculation depends on an external Python package installed via pip, without a pinned version in the artifact.

Skill content

- Python 3.x
- croniter (pip install croniter)

Recommendation

Install croniter from a trusted package index and consider pinning a known-good version if using this skill in a controlled environment.