Cron

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: cron Version: 1.0.0 The 'cron' skill is a local-first scheduling engine designed to track and calculate recurring task timings (daily, weekly, monthly, interval). Analysis of the Python scripts (e.g., add_job.py, lib/schedule.py) and documentation (SKILL.md) confirms that the skill only manages metadata in local JSON files within the OpenClaw workspace (~/.openclaw/workspace/memory/cron/). It contains no network activity, shell execution commands, or attempts to access sensitive system files.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may not work unless Python 3 is available, even though the registry metadata does not declare that dependency.

Why it was flagged

The runtime requirement is disclosed in SKILL.md, while the registry requirements list no required binaries. This is a metadata completeness issue rather than evidence of unsafe code.

Skill content
## Runtime Requirements
- Python 3 must be available as `python3`
- No external packages required
Recommendation

Before installing, confirm Python 3 is available; the publisher should declare Python 3 in the registry requirements.

What this means

Recurring-job titles and notes may remain in local OpenClaw memory until removed or edited.

Why it was flagged

User-provided schedule details are written into persistent local job storage. This is core to the skill's purpose, but it means private or instruction-like text can be retained and later displayed.

Skill content
"title": args.title,
"notes": args.notes,
"tags": parse_csv(args.tags),
...
save_jobs(data)
Recommendation

Avoid storing secrets or highly sensitive instructions in job titles or notes, and periodically review the local cron memory files if privacy matters.