Habilidades cron-schedule-planner

📦

cron-schedule-planner

Name: cron-schedule-planner
Author: dboeckli

Revisão do conteúdo r1 Risco Médio ⚙️ Comandos externos📁 Acesso ao sistema de arquivos

Plan GitHub Actions Cron Schedules

Scheduled workflows can collide and increase runner contention. This skill maps cron activity and suggests less crowded times for resource-intensive jobs.

Suporta: Claude Codex Code(CC)

📊 71 Adequado

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "cron-schedule-planner" from https://skillstore.io/skills/dboeckli-cron-schedule-planner.md and its manifest at https://skillstore.io/api/skills/dboeckli-cron-schedule-planner/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/dboeckli-cron-schedule-planner.md manifest assinado GET /api/skills/dboeckli-cron-schedule-planner/manifest lockfile assinado GET /api/skills/dboeckli-cron-schedule-planner/lockfile

Testar

Usando "cron-schedule-planner". Do our nightly workflows collide?

Resultado esperado:

The report finds three scheduled runs at 02:00 UTC. Two are high-intensity container builds, making this the primary collision window.

Usando "cron-schedule-planner". When should the integration build run?

Resultado esperado:

Move the integration build to an empty UTC hour identified by the report. Review daylight-saving effects before applying the change.

Usando "cron-schedule-planner". Are queue delays concentrated at specific times?

Resultado esperado:

Recent runs show the highest average queue delay during one crowded hour. The suggested alternatives have lower observed delays and no scheduled entries.

Auditoria de segurança

Risco Médio

v1 • 26/09/2026 Abrir o relatório versionado

All 98 static alerts are false positives caused by comments, Markdown backticks, escaped formatting, expected command substitution, and benign file handling. Commands use quoted arguments and support the documented read-only analysis. One medium contextual risk remains because repository-controlled values are written unescaped into an agent-facing Markdown report.

Arquivos analisados

697

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Preocupações de segurança confirmadas (1)

Médio

scripts/cron-schedule-planner.sh:231 scripts/cron-schedule-planner.sh:418

Unescaped Remote Data in Agent-Facing Report

Remote workflow names and cron text are inserted into Markdown without escaping. A crafted repository value could alter report structure or inject instructions when an agent summarizes it.

The script retrieves repository-controlled workflow content and writes derived values directly into Markdown. The downstream instructions explicitly ask an agent to summarize that report.

Fatores de risco

⚙️ Comandos externos (50)

📁 Acesso ao sistema de arquivos (19)

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/dboeckli-cron-schedule-planner/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/dboeckli-cron-schedule-planner/security.svg)](https://skillstore.io/skills/dboeckli-cron-schedule-planner?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/dboeckli-cron-schedule-planner?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dboeckli-cron-schedule-planner/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/dboeckli-cron-schedule-planner.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

dboeckli. (2026). cron-schedule-planner security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dboeckli-cron-schedule-planner/audits/1

Citação BibTeX

@techreport{dboeckli-dboeckli-cron-schedule-planner-2026,
  author = {dboeckli},
  title = {cron-schedule-planner security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/dboeckli-cron-schedule-planner/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cron-schedule-planner security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "dboeckli"
date-released: "2026-09-26"
url: "https://skillstore.io/skills/dboeckli-cron-schedule-planner/audits/1"
identifiers:
  - type: other
    value: "skillstore:dboeckli-cron-schedule-planner:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Reduce CI schedule collisions

Review scheduled workflows across an organization and move demanding jobs away from crowded hours.

Coordinate repository maintenance

Compare nightly builds, dependency updates, and validation jobs before choosing a new schedule.

Review runner contention

Combine schedule density with recent queue times to identify practical execution windows.

Teste estes prompts

Check one repository

Analyze scheduled workflows in owner/repository and show their UTC and Europe/Zurich times.

Find organization collisions

Scan repositories owned by organization and identify crowded UTC hours and high-intensity workflows.

Choose a better build time

Find a less crowded hour for the Testcontainers workflow and explain the proposed schedule change.

Use queue evidence

Analyze organization schedules with recent queue statistics, rank alternative hours, and present changes for approval without editing workflows.

Boas práticas

Use explicit repository scope when only selected projects should be analyzed.
Review suggested times against business deadlines and daylight-saving changes.
Confirm every workflow edit after inspecting the generated report and proposed difference.