OpenClaw

safe-cron-runner

Executes background tasks safely by dropping privileges and enforcing timeouts. Includes ISNAD signed manifest.

horn1110 来源安装数☆ 0 仓库 Starsv1.0.2

查看来源 ↗安装与使用 SKILL.md ↗

安装与使用

请根据来源仓库和你的 AI 工具说明安装此技能。先阅读技能文件和依赖要求，再添加到工作流。

SkillHub CLI

skillhub install horn111/safe-cron-runner

打开来源仓库，查看说明和兼容环境后，按来源提供的命令或步骤安装。

将来源链接提供给你的 Agent，让它先读取说明、核对依赖，并向你说明将执行的安装步骤。

查看来源 ↗使用指南

技能说明

Safe Cron Runner 🛡️

A secure background task executor for AI Agents.

Overview

This skill wraps background task execution to ensure that autonomous agents don't accidentally (or maliciously) execute long-running or privileged commands.

Key Protections

Privilege Dropping: Automatically drops root privileges (switches to nobody) before executing the subprocess.
Strict Timeouts: Enforces hard timeouts to prevent infinite loops or resource exhaustion.
Shell Injection Protection: Uses list-based command execution (subprocess without shell) to prevent common command injection attacks.
Transparent Logging: Separates and logs stdout, stderr, and execution status for auditability.

ISNAD Signed

This skill includes an ISNAD manifest (isnad_manifest.json) verifying the integrity of the release.

Usage

from safe_cron import SafeCronRunner

runner = SafeCronRunner(safe_user="nobody", timeout_sec=60)

# Execute command as a list for safety
result = runner.run_task(["ls", "-la", "/tmp"])
print(result)

来源信息

Source: github
Repository: openclaw/skills
Path: skills/horn111/safe-cron-runner
Version: 1.0.2
Commit: 622fc2a0d896e05d7d950021cb93d77bc8d9f9e0
分类来源: rules
状态: active
可见性: public

这些信息来自收录时的来源分析，可能滞后；使用前请核对最新来源文件。

来源内容

SKILL.md

# Safe Cron Runner 🛡️

**A secure background task executor for AI Agents.**

## Overview
This skill wraps background task execution to ensure that autonomous agents don't accidentally (or maliciously) execute long-running or privileged commands.

## Key Protections
1. **Privilege Dropping:** Automatically drops root privileges (switches to `nobody`) before executing the subprocess.
2. **Strict Timeouts:** Enforces hard timeouts to prevent infinite loops or resource exhaustion.
3. **Shell Injection Protection:** Uses list-based command execution (subprocess without shell) to prevent common command injection attacks.
4. **Transparent Logging:** Separates and logs `stdout`, `stderr`, and execution status for auditability.

## ISNAD Signed
This skill includes an ISNAD manifest (`isnad_manifest.json`) verifying the integrity of the release.

## Usage

```python
from safe_cron import SafeCronRunner

runner = SafeCronRunner(safe_user="nobody", timeout_sec=60)

# Execute command as a list for safety
result = runner.run_task(["ls", "-la", "/tmp"])
print(result)
```

搜索