Qclaw Cron Skill

PassAudited by ClawScan on May 9, 2026.

Overview

This instruction-only reminder skill is purpose-aligned, but it can create persistent scheduled agent tasks and route reminders to chat channels, so users should verify schedule and delivery details.

This skill appears coherent for creating and managing reminders. Before installing, be comfortable with it creating scheduled jobs, using the OpenClaw cron tool or CLI, reading local channel-default routing data when needed, and storing reminder text until the task runs or is removed.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A reminder or recurring job may keep running in the background until it completes, is disabled, or is deleted.

Why it was flagged

The skill instructs the agent to create scheduled cron tasks, including recurring tasks, which can continue operating after the original conversation.

Skill content
用户提到「提醒/定时/每天X点/X分钟后/周期/重复/打卡/签到」等时,必须创建 cron 任务
Recommendation

Before using it, check whether the task is one-time or recurring and know how to list, pause, or delete scheduled jobs.

What this means

The agent may run local OpenClaw CLI commands to create or manage reminder jobs.

Why it was flagged

For some channels the skill tells the agent to use a CLI through exec instead of only a structured cron tool. This is disclosed and purpose-aligned, but it is a broader execution mechanism.

Skill content
channel=`wecom`/`feishu`/`openclaw-weixin`/`qqbot` | B:`openclaw cron add` CLI(通过 `exec`)
Recommendation

Use this skill only in an environment where the openclaw CLI is trusted, and review generated task names, schedules, messages, and delivery arguments.

What this means

Reminder delivery depends on stored or current chat recipient identifiers, so a task could send to an external channel target if configured that way.

Why it was flagged

The skill uses current session identity and local channel-default mappings to choose where external reminders are delivered.

Skill content
当前会话有 `sender_id` → 直接用作 `to` ... 必须先读 `~/.qclaw/channel-defaults.json`
Recommendation

Verify the target channel and recipient before creating external-channel reminders, especially from the local UI.

What this means

Any sensitive text placed in a reminder may be stored with the scheduled job and later delivered or rendered.

Why it was flagged

The reminder content is stored inside a scheduled agent-turn payload and reused later when the cron job runs.

Skill content
"payload": {"kind":"agentTurn","message":"你是一个暖心的提醒助手。请用温暖、有趣的方式提醒用户:{内容}。要求:..."}
Recommendation

Avoid putting secrets or highly sensitive information in reminder text, and delete jobs that should no longer retain their payload.