Qclaw Cron Skill

AdvisoryAudited by Static analysis on May 9, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A reminder or recurring job may keep running in the background until it completes, is disabled, or is deleted.

Why it was flagged

The skill instructs the agent to create scheduled cron tasks, including recurring tasks, which can continue operating after the original conversation.

Skill content
用户提到「提醒/定时/每天X点/X分钟后/周期/重复/打卡/签到」等时,必须创建 cron 任务
Recommendation

Before using it, check whether the task is one-time or recurring and know how to list, pause, or delete scheduled jobs.

What this means

The agent may run local OpenClaw CLI commands to create or manage reminder jobs.

Why it was flagged

For some channels the skill tells the agent to use a CLI through exec instead of only a structured cron tool. This is disclosed and purpose-aligned, but it is a broader execution mechanism.

Skill content
channel=`wecom`/`feishu`/`openclaw-weixin`/`qqbot` | B:`openclaw cron add` CLI(通过 `exec`)
Recommendation

Use this skill only in an environment where the openclaw CLI is trusted, and review generated task names, schedules, messages, and delivery arguments.

What this means

Reminder delivery depends on stored or current chat recipient identifiers, so a task could send to an external channel target if configured that way.

Why it was flagged

The skill uses current session identity and local channel-default mappings to choose where external reminders are delivered.

Skill content
当前会话有 `sender_id` → 直接用作 `to` ... 必须先读 `~/.qclaw/channel-defaults.json`
Recommendation

Verify the target channel and recipient before creating external-channel reminders, especially from the local UI.

What this means

Any sensitive text placed in a reminder may be stored with the scheduled job and later delivered or rendered.

Why it was flagged

The reminder content is stored inside a scheduled agent-turn payload and reused later when the cron job runs.

Skill content
"payload": {"kind":"agentTurn","message":"你是一个暖心的提醒助手。请用温暖、有趣的方式提醒用户:{内容}。要求:..."}
Recommendation

Avoid putting secrets or highly sensitive information in reminder text, and delete jobs that should no longer retain their payload.