Cronfree

• Outcome: Review
• Latest audit: May 29, 2026 at 9:36 PM UTC
• Version:
  1.0.2

Overview

This appears to be a legitimate Cronfree integration, but it gives agents broad authenticated API access with limited safety scoping.

Review before installing. Use it only with the intended Cronfree account, prefer discovered Membrane actions over raw proxy requests, and require explicit confirmation before creating, updating, deleting, or triggering scheduled workflows. Avoid sending personal or sensitive data through proxy requests unless it is necessary for the task.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill explicitly documents raw proxy requests to the external API without requiring confirmation, read-only defaults, or warning that these requests may modify or transmit sensitive data. Because proxy requests can perform arbitrary authenticated operations, an agent could execute destructive or privacy-impacting actions more easily than when constrained to vetted high-level actions.

VirusTotal

63/63 vendors flagged this skill as clean.