Smart Cron
ReviewAudited by ClawScan on May 10, 2026.
Overview
Smart Cron is a disclosed scheduling skill, but it can create unattended recurring OpenClaw tasks and the actual implementation is not included for review.
Install only if you want OpenClaw tasks to run on a recurring schedule. Review every scheduled task, especially ones that read private data, modify files, send messages, or run frequently. Because no implementation is included in the reviewed package, verify any external smart-cron CLI or repository before using it.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A scheduled task may run repeatedly in the future and take actions based on the task text you provided.
The skill is explicitly designed to create persistent scheduled OpenClaw tasks. This is purpose-aligned and disclosed, but recurring jobs can keep operating after the original user interaction.
Schedule any OpenClaw task using plain English... Full cron job lifecycle — add, list, remove, pause, resume
Review each scheduled task carefully, use pause/remove when no longer needed, and avoid scheduling sensitive or destructive tasks without clear limits.
The skill may run local commands or trigger OpenClaw tasks and may send messages when jobs fail.
The metadata declares execution and messaging tools, which fit the stated cron scheduling and alerting purpose. These tools still allow local task execution and outbound alerts if used by the scheduler.
"tools": ["exec", "message"]
Confirm the exact task and schedule before adding a job, and inspect configured alert channels.
The skill may not work as documented unless external code or a separate CLI is installed, and that external implementation was not reviewed here.
The package does not include the smart-cron implementation or install instructions, even though the documentation describes a CLI and system cron integration. This limits review of how the scheduling is actually performed.
No install spec — this is an instruction-only skill.
Only install or run any referenced external implementation from a trusted source, and review it before granting scheduling or execution authority.
Local job history may reveal what tasks you scheduled and what errors occurred.
The skill stores persistent job configuration and execution logs locally. This is disclosed and purpose-aligned, but logs can contain task names, errors, and other operational context.
All job configs and logs stored locally at `~/.openclaw/workspace/smart-cron-data/`. SQLite, no telemetry.
Set an appropriate log retention period and avoid putting secrets directly in task names or scheduled prompts.
Failure details from scheduled tasks could be sent to an external messaging channel you configure.
Failure alerts may send task names, times, error messages, and log references to WhatsApp or Telegram. This is disclosed, but the artifact does not detail recipient validation or channel setup.
When a scheduled task fails, Smart Cron sends an alert via your configured channel
Use trusted alert channels and avoid including sensitive information in scheduled task descriptions or outputs.