OpenClaw Cron Guardrails

Create, review, repair, or route OpenClaw cron jobs and other scheduled agent actions with safe defaults and explicit delivery/session routing. Use when the...

This skill is broadly coherent with its cron-guardrail purpose, but take these precautions before enabling it: - Expect the skill to require the local 'openclaw' CLI and whatever account that CLI uses; the package metadata does not declare that dependency. Confirm the CLI is installed and that you understand which workspace/account/token it will operate under. - Scripts may modify live cron jobs. By default the scripts support dry-run modes, but passing --apply (or using cron_doctor with --apply-errors) will make changes. Do not run with apply flags until you review what the tool will change. - create_cron.py renders a command and then executes it with shell=True when applying. If you plan to use the apply path, inspect render_cron_command.py to verify it properly escapes or constrains fields (untrusted input could lead to shell injection). Prefer printing the rendered command and running it manually. - If you want to reduce risk: run lint_existing_crons.py and create_cron.py in dry-run modes, review outputs, and grant apply only after human approval. Consider running the scripts in a sandboxed account with limited permissions. What would change my assessment to 'benign': the package metadata explicitly listing 'openclaw' as a required binary and documenting the expected account/permission scope, and ensure render/create code avoids shell=True or otherwise sanitizes/executes commands without invoking an unsafe shell. Providing tests or a safety-review for renderer/validator would also increase confidence.

Type: OpenClaw Skill Name: openclaw-cron-guardrails Version: 0.1.5 The openclaw-cron-guardrails skill bundle is a legitimate utility designed to help AI agents safely manage scheduled tasks within the OpenClaw ecosystem. It provides a robust pipeline for parsing natural language scheduling requests, validating them against safety schemas, and rendering them into CLI commands using shlex.quote to prevent shell injection (seen in scripts/render_cron_command.py and scripts/create_cron.py). The bundle specifically addresses common configuration pitfalls like fragile delivery routing and insufficient timeouts, acting as a protective layer rather than a malicious tool.