360 Secure SkillHub
360 安全技能中心

Billy — Cron Guardrails Pack

该 Skill 通过 Python 脚本静态检查 crontab 条目:校验 cron 字段数量、拒绝已知错误模型名,并标记看似发送通知却缺少 NO_REPLY 的任务;支持文件或标准输入,返回问题状态码并附带检查清单。

highlander89
highlander89
热度 83.45
最近更新 2026-05-11 17:27:32
分类:自动化依赖:代码执行 / 读写文件应用场景:自动化脚本 / DevOps / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add billy-cron-guardrails-pack
Metadata
name
cron-guardrails-pack
description
Lint cron entries for schedule validity, bad model names, and missing NO_REPLY discipline markers.

cron-guardrails-pack

Author: Billy (SAPCONET)

Purpose

Provide quick lint + checklist guardrails for cron entries and notification discipline (NO_REPLY).

What this skill includes

  • scripts/cron-lint.py: static checks for cron entry lines.

Checks performed

  • Cron schedule must contain exactly 5 fields.
  • Rejects known bad model names (for example: haiku-4-6).
  • Flags jobs that appear to announce/message but do not include NO_REPLY.

Usage

Lint a cron file:

python3 scripts/cron-lint.py /path/to/crontab.txt

Lint stdin:

cat /path/to/crontab.txt | python3 scripts/cron-lint.py -

Exit codes:

  • 0: no issues
  • 1: one or more issues found
  • 2: usage or read error

NO_REPLY checklist

  • Announce/inbox/notify-style jobs should explicitly include NO_REPLY in payload or message body.
  • Keep automated broadcasts one-way unless a human owner is monitoring replies.
  • Include owner and purpose in command comments.

Example cron payload snippet

*/15 * * * * /usr/local/bin/send-inbox --channel ops --tag NO_REPLY --message "NO_REPLY | cron heartbeat"