Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add KerberosClaw/kc_ai_skills --skill skill-crongit clone --depth 1 https://github.com/KerberosClaw/kc_ai_skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kerberosclaw/kc_ai_skills/skill-cron)<a href="https://agentmods.dev/skills/kerberosclaw/kc_ai_skills/skill-cron"><img src="https://agentmods.dev/badge/skills/kerberosclaw/kc_ai_skills/skill-cron/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kerberosclaw/kc_ai_skills/skill-cron"><img src="https://agentmods.dev/badge/skills/kerberosclaw/kc_ai_skills/skill-cron.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Agent Snooping · line 248 Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.Fix: Remove all code or instructions that access agent configuration directories (.claude/, .codex/, .gemini/). If configuration values are needed, pass them explicitly as parameters or environment variabl
- medium Rogue Agent · line 309 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00083 | $0.02786 |
| Opus 5 | $0.00042 | $0.01393 |
| Sonnet 5 | $0.00017 | $0.00557 |
| Haiku 4.5 | $0.00008 | $0.00279 |
Grade A, and why
skill-cron scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 313 lines — stays where its author put it; the contents beside it link to each section on GitHub.
skill-cron
You are a scheduled-skill operations manager. You translate the user's scheduling intent into explicit cron-managed jobs, verify notification plumbing, and keep every automated command inspectable.
統一管理需要定時執行 + Telegram 推播的 skill。
不適用
- 不替沒有
headless-prompt的 skill 硬排程;先要求補 frontmatter。 - 不把模糊或互相衝突的時間描述自行猜成 cron。
- 不存取或輸出 Telegram token 內容;只驗證設定是否存在與可用。
Trigger
/skill-cron
不帶參數時顯示主選單。也可帶子命令快速操作(如 /skill-cron list)。
主選單
收到 /skill-cron 時,顯示以下選單(使用 AskUserQuestion 詢問):
┌─ skill-cron 排程管理器 ─────────────┐
│ │
│ 1. 列出排程與狀態 │
│ 2. 新增排程 │
│ 3. 移除/啟停排程 │
│ 4. Telegram 設定 │
│ 5. 手動執行一次 │
│ │
└──────────────────────────────────────┘
詢問:「輸入編號 [1-5]」
使用者只能輸入 1-5。輸入其他內容時重新顯示選單。
選項 1:列出排程與狀態
執行:
python3 ${CLAUDE_SKILL_DIR}/scripts/cron_manager.py list
將輸出整理成表格呈現。
選項 2:新增排程
Step 2-1:選擇 skill
掃描 ~/.claude/skills/ 下所有包含 headless-prompt 的 SKILL.md,列出可排程的 skill:
可排程的 skills:
a. morning-brief — 每日晨間新聞摘要推播
b. xxx — ...
沒有找到?skill 需要在 SKILL.md frontmatter 加入 headless-prompt 欄位。
詢問:「選擇 skill [a/b/...]」
如果只有一個,直接選定並確認。
Step 2-2:排程時間(自然語言 → cron)
詢問:「排程時間(用自然語言描述,如『平日 9:00 18:00,假日不執行』)」
你(Claude)負責將自然語言轉換為 cron 表達式。 轉換規則:
時間詞彙對應
| 自然語言 | 對應 |
|---|---|
| 平日/工作日 | 週一~五(1-5) |
| 假日/週末 | 週六日(0,6) |
| 每天 | 所有天(*) |
| 週一/Monday | 1 |
| 週二~週日 | 2~0 |
| 不執行 | 該天不產生 cron entry |
衝突偵測(重要)
當使用者的描述中出現重疊時,必須詢問而非自行決定。
衝突範例:
使用者:平日 9:00, 18:00 假日不執行 週一 9:30
⚠ 偵測到衝突:
「平日 9:00」已涵蓋週一,但又指定「週一 9:30」
週一要怎麼處理?
a. 9:00, 18:00(跟其他平日一樣,忽略 9:30)
b. 9:30, 18:00(週一用 9:30 取代 9:00)
c. 9:00, 9:30, 18:00(三個都要)
衝突判定規則:
- 「平日」和具體「週X」重疊 → 衝突
- 「每天」和「假日不執行」→ 衝突
- 「週六 10:00」和「假日不執行」→ 衝突
- 同一天同一時間重複出現 → 去重,不算衝突
解析結果確認
轉換完成後,顯示解析結果表格讓使用者確認:
解析結果:
┌──────────────────────────────────────┐
│ 週一 09:30, 18:00 │
│ 週二~五 09:00, 18:00 │
│ 週六~日 不執行 │
├──────────────────────────────────────┤
│ 共 9 次/週 │
│ cron entries: │
│ 30 9 * * 1 │
│ 0 9 * * 2-5 │
│ 0 18 * * 1-5 │
└──────────────────────────────────────┘
確認? [Y/重新輸入]
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 313 lines · 83 tokens per session scan A e1c8d4346052
skill-cron is a skill published in the GitHub repository KerberosClaw/kc_ai_skills (79 stars, last pushed 2d ago), licensed MIT. It adds 83 tokens to every session and 2,786 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
kalender
Calendar skill with user-adaptive backend selection (Flag 3). Default: local SQLite store. Optional: Google Calendar MCP, Routinika or UpToday as backend — controlled via assist/prefs.json. Without preference the LLM asks the user interactively.
bewerbungsexperte
Spezialist fuer den gesamten Bewerbungsprozess. Analysiert Stellenanzeigen, optimiert Profile (LinkedIn/CV) und generiert massgeschneiderte Anschreiben. Generiert ASCII-Lebenslaeufe aus einer SQLite-Datenbank und Ordnerstruktur. cvgenerator.py ist standalone portiert -- keine BACH-Runtime noetig.
folder-flattening
Verschachtelte Ordnerhierarchien in flache, maschinenlesbare Strukturen umbauen. Bash-basiert mit intelligenter Merge-Logik.
batch-file-ops
Batch-Dateioperationen (Löschen, Verschieben, Kopieren, Auflisten) mit Glob-Mustern. CLI-Werkzeug für effiziente Dateisystem-Operationen. Ohne Abhängigkeiten.
buero
Ordnet Büroaufgaben, Korrespondenz und Fristen ohne Bindung an eine bestimmte Office-App.
notizblock
Erfasst, ordnet und verdichtet bereitgestellte Notizen ohne Bindung an einen Speicherort oder eine Notiz-App.