Smart Cron

Schedule and manage OpenClaw tasks using natural language with timezone support, failure alerts, logs, and full cron lifecycle commands.

This skill is plausible but inconsistent in key ways. Before installing or enabling it: (1) verify the referenced GitHub repo and confirm a trustworthy release/binary or install steps (no code is bundled here); (2) ask the author how WhatsApp/Telegram alerts are implemented and what credentials will be needed — don't provide API keys unless you trust the implementation; (3) be aware the agent will run shell commands (exec) and will edit your crontab and write to ~/.openclaw/workspace/smart-cron-data/ — back up your crontab and review any files created; (4) prefer a version that includes source or a vetted install method, or request explicit instructions for credential configuration and a privacy/telemetry statement. If you need high assurance, treat this as untrusted until you can review the upstream code and alert-channel integration.

Type: OpenClaw Skill Name: smart-cron Version: 1.0.0 The skill is classified as suspicious due to its reliance on the `exec` tool (declared in `skill.json`) and the ability to schedule arbitrary commands via the `smart-cron add --task` functionality described in `SKILL.md`. While these capabilities are central to a cron scheduler's purpose, they introduce a significant risk of Remote Code Execution (RCE) if the OpenClaw agent is susceptible to prompt injection or if the underlying skill implementation fails to sanitize user-provided task commands before passing them to the system's cron daemon. This represents a critical vulnerability rather than explicit malicious intent within the provided files.