cron
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
copawcommand-line interface to manage scheduled tasks. It defines specific subcommands such ascreate,list,get,state,pause,resume,delete, andrunto interact with a cron service. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to the way it handles user-provided content. Specifically, when creating a task of type
agent, the content of the--textparameter is stored and later processed as a direct instruction to the agent. - Ingestion points: The
--textparameter and the-f job_spec.jsonfile input in thecopaw cron createcommand withinSKILL.md. - Boundary markers: Absent. The skill does not use delimiters or instructions to treat the user-supplied text as data rather than instructions.
- Capability inventory: The skill allows creating (
create), listing (list), and executing (run) tasks that can interact with other agents or channels. - Sanitization: Absent. There are no validation or escaping mechanisms described for the input parameters.
Audit Metadata