Scan Report
5 /100
linux-cron-panel
Linux 定时任务 Web 管理面板 - 通过 API 管理 Linux crontab，支持自动安装、任务创建、编辑、删除、立即执行和日志查看
A legitimate Linux cron job management skill with clear documentation, declared capabilities, and localhost-only network activity. No malicious indicators found.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | WRITE | WRITE | ✓ Aligned | SKILL.md lines 26-56: mkdir, cat for script creation in ~/.openclaw/ |
| Network | READ | READ | ✓ Aligned | SKILL.md: All curl calls to http://127.0.0.1:5002 (localhost only) |
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md lines 40-54: systemctl commands for systemd service management |
| Environment | NONE | NONE | — | No environment variable access detected |
| Skill Invoke | NONE | NONE | — | No cross-skill invocation detected |
| Clipboard | NONE | NONE | — | No clipboard access detected |
| Browser | NONE | NONE | — | No browser access detected |
| Database | NONE | NONE | — | No database access detected |
5 findings
Medium External URL 外部 URL
http://127.0.0.1:5002/api/version SKILL.md:18 Medium External URL 外部 URL
http://127.0.0.1:5002 SKILL.md:64 Medium External URL 外部 URL
http://127.0.0.1:5002/api/tasks SKILL.md:99 Medium External URL 外部 URL
http://127.0.0.1:5002/api/tasks/ SKILL.md:145 Medium External URL 外部 URL
http://127.0.0.1:5002/api/status SKILL.md:216 File Tree
1 files · 6.0 KB · 267 lines Markdown 1f · 267L
└─
SKILL.md
Markdown
Security Positives
✓ All capabilities are explicitly declared in SKILL.md
✓ Network activity restricted to localhost (127.0.0.1:5002)
✓ No credential harvesting or sensitive path access
✓ No obfuscation techniques (base64, eval) detected
✓ Scripts stored in designated directory (~/.openclaw/scripts)
✓ Clear documentation of purpose and usage
✓ References verifiable public repository (GitHub)
✓ No data exfiltration or suspicious POST requests to external IPs
✓ Legitimate cron job management functionality