Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Cron Mastery

v1.0.3

Master OpenClaw's timing systems. Use for scheduling reliable reminders, setting up periodic maintenance (janitor jobs), and understanding when to use Cron v...

33· 14.6k·145 current·154 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name and description promise cron/scheduling guidance and the SKILL.md focuses exclusively on scheduling patterns, payload types, cleanup, and gateway behavior. Required binaries/env/configs are none and that is consistent with an instruction-only reference skill.
Instruction Scope
Instructions remain within scheduling/maintenance scope but include potentially destructive operational steps (e.g., manual deletion of ~/.openclaw/state/cron/jobs.json and restarting the gateway) and explicit advice to run janitor actions in the 'main' session with full tool access. These actions are relevant to cron maintenance but require care and appropriate privileges.
Install Mechanism
No install spec or code is provided (instruction-only), so nothing is written to disk or fetched during install.
Credentials
The skill requests no environment variables or credentials. Example payloads reference delivery channels (e.g., Telegram) and specific numeric recipient IDs, but the skill does not itself request tokens — delivering via those channels would rely on the agent's preexisting integrations. This is coherent but users should be aware examples assume external integrations exist and that delivering messages requires appropriate credentials elsewhere.
Persistence & Privilege
always is false and the skill does not request persistent presence. It does recommend using the 'main' session for janitor tasks because it needs broader tool access; that is a legitimate runtime guidance rather than a privilege escalation in the skill manifest.
Assessment
This is a documentation-only skill about scheduling and maintenance; it appears coherent with that purpose. Before using it: (1) confirm your OpenClaw version matches the stated compatibility (v2026.2.15+); (2) back up ~/.openclaw/state/cron/jobs.json before following deletion guidance — removing that file and restarting the gateway is destructive and should be a last resort; (3) be cautious granting or using the 'main' session for janitor jobs since it may have full tool access and can delete jobs; (4) examples reference Telegram delivery and hardcoded recipient IDs — ensure any proactive delivery channels are configured and authorized elsewhere and replace example IDs with your own; (5) test templates in a safe environment to verify behavior before running them in production.

Like a lobster shell, security has layers — review code before you run it.

latestvk977hynvn27s89nv5qt2ek049x81831m

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments