ClawHub
Back to skill

Security audit

Cron Health Cron

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed local OpenClaw cron-health checker with constrained read-only diagnostics, though it has one optional validation bug users should fix before relying on it.

Install only on OpenClaw hosts where you want cron and scheduler diagnostics. Review the config paths before use because logs and scheduler metadata can contain sensitive data, confirm redaction works, and fix or avoid the optional validation_command path until the cfg scoping bug is corrected.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Intent-Code Divergence

Medium
Confidence
99% confidence
Finding
The function validate_expected_project_jobs references cfg even though cfg is not in scope, which will raise a NameError when a validation_command is configured. That creates a denial-of-service condition for the health check: a crafted or normal config path reaching this code can crash reporting and suppress visibility into cron health.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.