可信 — 风险评分 5/100
上次扫描:2 天前 重新扫描
5 /100
linux-cron-panel
Linux 定时任务 Web 管理面板 - 通过 API 管理 Linux crontab,支持自动安装、任务创建、编辑、删除、立即执行和日志查看
A legitimate Linux cron job management skill with clear documentation, declared capabilities, and localhost-only network activity. No malicious indicators found.
技能名称linux-cron-panel
分析耗时23.1s
引擎pi
可以安装
This skill is safe to use. No security concerns identified.
资源类型声明权限推断权限状态证据
文件系统 WRITE WRITE ✓ 一致 SKILL.md lines 26-56: mkdir, cat for script creation in ~/.openclaw/
网络访问 READ READ ✓ 一致 SKILL.md: All curl calls to http://127.0.0.1:5002 (localhost only)
命令执行 WRITE WRITE ✓ 一致 SKILL.md lines 40-54: systemctl commands for systemd service management
环境变量 NONE NONE No environment variable access detected
技能调用 NONE NONE No cross-skill invocation detected
剪贴板 NONE NONE No clipboard access detected
浏览器 NONE NONE No browser access detected
数据库 NONE NONE No database access detected
5 项发现
🔗
中危 外部 URL 外部 URL
http://127.0.0.1:5002/api/version
SKILL.md:18
🔗
中危 外部 URL 外部 URL
http://127.0.0.1:5002
SKILL.md:64
🔗
中危 外部 URL 外部 URL
http://127.0.0.1:5002/api/tasks
SKILL.md:99
🔗
中危 外部 URL 外部 URL
http://127.0.0.1:5002/api/tasks/
SKILL.md:145
🔗
中危 外部 URL 外部 URL
http://127.0.0.1:5002/api/status
SKILL.md:216

目录结构

1 文件 · 6.0 KB · 267 行
Markdown 1f · 267L
└─ 📝 SKILL.md Markdown 267L · 6.0 KB

安全亮点

✓ All capabilities are explicitly declared in SKILL.md
✓ Network activity restricted to localhost (127.0.0.1:5002)
✓ No credential harvesting or sensitive path access
✓ No obfuscation techniques (base64, eval) detected
✓ Scripts stored in designated directory (~/.openclaw/scripts)
✓ Clear documentation of purpose and usage
✓ References verifiable public repository (GitHub)
✓ No data exfiltration or suspicious POST requests to external IPs
✓ Legitimate cron job management functionality