Safe Cron Runner

Executes background tasks safely by dropping privileges and enforcing timeouts. Includes ISNAD signed manifest.

This skill appears to do what it claims and does not ask for credentials or network access. Before installing, consider: (1) Logs: the runner appends executed commands and output previews to /tmp/safe_cron.log — avoid passing secrets or sensitive arguments to commands you run with this skill, and if you adopt it, change the log path and tighten permissions. (2) Privilege drop: the code only drops privileges when started as root (expected behavior); validate that your runtime environment behaves as you expect. (3) ISNAD manifest: a signed manifest is included but the code does not verify it at runtime — if provenance matters, verify the signature externally. (4) Audit: review/monitor agent use of this skill before allowing autonomous invocations to ensure it isn't used to run unexpected commands. If you want stronger privacy, modify the code to sanitize logged arguments and to write logs to a controlled location with restricted permissions.

Type: OpenClaw Skill Name: safe-cron-runner Version: 1.0.2 The 'safe-cron-runner' skill is a utility designed to execute background tasks with security controls such as privilege dropping (to 'nobody'), hard timeouts, and shell injection prevention by enforcing list-based command execution. The code in safe_cron.py aligns with its stated purpose in SKILL.md, and the inclusion of an ISNAD manifest (isnad_manifest.json) suggests an attempt at providing integrity verification. No evidence of data exfiltration, backdoors, or malicious prompt injection was found.