Security audit

Cron 精确调度

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent reminder and cron scheduling guide, but users should be aware it may create persistent scheduled tasks, store timezone information, and send reminder content to external chat platforms.

Install only if you want the agent to manage cron-style reminders. Confirm each scheduled task, external chat destination, and reminder message before creation, and avoid putting secrets in reminders. Ask the agent to explain or skip any MEMORY.md timezone write if you do not want that preference stored persistently.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Vague Triggers

High

Confidence: 93% confidence
Finding: The trigger rules are broad enough to capture very common requests like '提醒我' or any mention of '定时/调度', and the file further says this skill should be prioritized whenever those words appear. In an agent ecosystem, that can cause unintended invocation of a high-privilege skill with Read/Write/Edit/Bash capabilities, increasing the chance of unsolicited persistence, scheduling, or external actions.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The skill instructs the agent to write user timezone information into MEMORY.md but does not require user notice or consent for persistent storage. This creates an undisclosed retention path for user data and can surprise users who expect a transient scheduling interaction rather than a persistent profile change.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill includes examples for pushing reminder content to WeCom, DingTalk, and Feishu without an explicit warning that message contents and recipient identifiers will be transmitted to third-party platforms. This can lead to accidental disclosure of sensitive reminder text or metadata outside the agent environment.

Ssd 3

Medium

Confidence: 97% confidence
Finding: Persisting timezone data in a natural-language memory file creates a durable data retention channel outside the immediate task context. Even though timezone seems low sensitivity, storing profile attributes in shared memory can accumulate user metadata over time and may later influence unrelated actions or be exposed through memory inspection.

Static analysis

No suspicious patterns detected.