Heartbeat Cron

• Analyzed: May 10, 2026, 6:38 AM
• Findings: 1
• Version: 0.4.4
• Hash: de70cd00186ab68194e9199a2a0766980568bde9c7db0bc9a09b51227da121d7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The heartbeat-cron skill is a legitimate utility designed to help users create and manage scheduled automation tasks (heartbeats) for the 'murmur' CLI daemon. The bundle is exceptionally well-documented and includes a comprehensive test suite (unit, integration, and E2E) with nearly 99% code coverage, which is a strong indicator of a professional development workflow. While the skill facilitates the generation of shell commands and network requests (e.g., using curl for Slack/Telegram notifications or the GitHub CLI), these actions are explicitly aligned with the user's stated automation goals. The instructions in SKILL.md and examples.md emphasize security best practices, such as using environment variables for secrets. No evidence of data exfiltration, unauthorized persistence, or malicious prompt injection was found.