Cron Limited

This skill appears to implement the advertised features, but there are practical and security issues you should address before installing: - Verify prerequisites: ensure Python3, lunarcalendar, jq, and the openclaw CLI are installed and trusted. The skill does not declare these in its metadata, which is an omission. - The script calls /tmp/lunar-venv/bin/python3 but does not create or validate that venv. Either create a controlled venv at that path yourself or modify the script to use a known Python interpreter to avoid running an attacker-provided binary in /tmp. - Understand how your OpenClaw runtime treats cron job messages: are they delivered as text only, or can they be interpreted/executed by the agent? The script sets a deletion job message to "openclaw cron rm <id>" — if messages get executed as commands, that could allow arbitrary command execution via crafted job messages. Confirm behavior and restrict who can create cron jobs. - Inspect and control ~/.openclaw/cron-limited/birthdays.json and the recipients (channel/to). The agent will send messages on your behalf to those destinations — ensure they are correct and limited to trusted recipients. - Consider editing the script to use a configurable python path and to explicitly create/activate its venv (or rely on system python), and to avoid embedding executable commands inside job message text unless you are certain the platform treats messages only as content. If you cannot verify the above, treat this skill as risky. If you proceed, run it in a controlled environment first and inspect created cron jobs and the config files it writes.