cron-scheduler
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [SAFE] (SAFE): No security issues detected. All parsing and calculation operations are handled locally through static logic without dynamic execution or external side effects.
- [Metadata Poisoning] (LOW): The repository link in the metadata (kiorber/croniter) appears to be a personal mirror or typo for the official kiorky/croniter library. As the provided script is self-contained and does not download or import this external dependency, this is an informational finding only.
- [Indirect Prompt Injection] (LOW): The tool ingests untrusted cron expressions from the user, but its capability tier is limited to displaying human-readable text (INFO/LOW tier). It lacks the network, file modification, or command execution capabilities required to facilitate a meaningful indirect injection attack.
Audit Metadata