Fähigkeiten cron-schedule-planner

📦

cron-schedule-planner

Name: cron-schedule-planner
Author: dboeckli

Inhaltsrevision r1 Mittleres Risiko ⚙️ Externe Befehle📁 Dateisystemzugriff

Plan GitHub Actions Cron Schedules

Scheduled workflows can collide and increase runner contention. This skill maps cron activity and suggests less crowded times for resource-intensive jobs.

Unterstützt: Claude Codex Code(CC)

📊 71 Angemessen

Maintain this Skill? Claim it 📊 71 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "cron-schedule-planner" from https://skillstore.io/skills/dboeckli-cron-schedule-planner.md and its manifest at https://skillstore.io/api/skills/dboeckli-cron-schedule-planner/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/dboeckli-cron-schedule-planner.md Signiertes manifest GET /api/skills/dboeckli-cron-schedule-planner/manifest Signiertes lockfile GET /api/skills/dboeckli-cron-schedule-planner/lockfile

Testen

„cron-schedule-planner“ wird verwendet. Do our nightly workflows collide?

Erwartetes Ergebnis:

The report finds three scheduled runs at 02:00 UTC. Two are high-intensity container builds, making this the primary collision window.

„cron-schedule-planner“ wird verwendet. When should the integration build run?

Erwartetes Ergebnis:

Move the integration build to an empty UTC hour identified by the report. Review daylight-saving effects before applying the change.

„cron-schedule-planner“ wird verwendet. Are queue delays concentrated at specific times?

Erwartetes Ergebnis:

Recent runs show the highest average queue delay during one crowded hour. The suggested alternatives have lower observed delays and no scheduled entries.

Sicherheitsaudit

Mittleres Risiko

v1 • 26.9.2026 Versionsbericht öffnen

All 98 static alerts are false positives caused by comments, Markdown backticks, escaped formatting, expected command substitution, and benign file handling. Commands use quoted arguments and support the documented read-only analysis. One medium contextual risk remains because repository-controlled values are written unescaped into an agent-facing Markdown report.

Gescannte Dateien

697

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel

scripts/cron-schedule-planner.sh:231 scripts/cron-schedule-planner.sh:418

Unescaped Remote Data in Agent-Facing Report

Remote workflow names and cron text are inserted into Markdown without escaping. A crafted repository value could alter report structure or inject instructions when an agent summarizes it.

The script retrieves repository-controlled workflow content and writes derived values directly into Markdown. The downstream instructions explicitly ask an agent to summarize that report.

Risikofaktoren

⚙️ Externe Befehle (50)

📁 Dateisystemzugriff (19)

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/dboeckli-cron-schedule-planner/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/dboeckli-cron-schedule-planner/security.svg)](https://skillstore.io/skills/dboeckli-cron-schedule-planner?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/dboeckli-cron-schedule-planner?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dboeckli-cron-schedule-planner/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/dboeckli-cron-schedule-planner.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

dboeckli. (2026). cron-schedule-planner security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dboeckli-cron-schedule-planner/audits/1

BibTeX-Zitat

@techreport{dboeckli-dboeckli-cron-schedule-planner-2026,
  author = {dboeckli},
  title = {cron-schedule-planner security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/dboeckli-cron-schedule-planner/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cron-schedule-planner security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "dboeckli"
date-released: "2026-09-26"
url: "https://skillstore.io/skills/dboeckli-cron-schedule-planner/audits/1"
identifiers:
  - type: other
    value: "skillstore:dboeckli-cron-schedule-planner:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Reduce CI schedule collisions

Review scheduled workflows across an organization and move demanding jobs away from crowded hours.

Coordinate repository maintenance

Compare nightly builds, dependency updates, and validation jobs before choosing a new schedule.

Review runner contention

Combine schedule density with recent queue times to identify practical execution windows.

Diese Prompts ausprobieren

Check one repository

Analyze scheduled workflows in owner/repository and show their UTC and Europe/Zurich times.

Find organization collisions

Scan repositories owned by organization and identify crowded UTC hours and high-intensity workflows.

Choose a better build time

Find a less crowded hour for the Testcontainers workflow and explain the proposed schedule change.

Use queue evidence

Analyze organization schedules with recent queue statistics, rank alternative hours, and present changes for approval without editing workflows.

Bewährte Praktiken

Use explicit repository scope when only selected projects should be analyzed.
Review suggested times against business deadlines and daylight-saving changes.
Confirm every workflow edit after inspecting the generated report and proposed difference.