@pwddd/skills-scanner 1.0.0-beta.15 → 1.0.0-beta.16

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "skills-scanner",
   "name": "Skills Scanner",
   "description": "Security scanner for OpenClaw Skills to detect potential threats",
-  "version": "1.0.0-beta.15",
+  "version": "1.0.0-beta.16",
   "author": "pwddd",
   "skills": ["./skills"],
   "uiHints": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pwddd/skills-scanner",
-  "version": "1.0.0-beta.15",
+  "version": "1.0.0-beta.16",
   "description": "OpenClaw Skills security scanner plugin - detect malicious code, data exfiltration, and prompt injection",
   "type": "module",
   "main": "./index.ts",

package/src/cron-manager.ts

@@ -84,9 +84,9 @@ export async function ensureCronJob(options: CronManagerOptions): Promise<void>
     }
 
     // Create cleanup command - remove ALL skills-weekly-report jobs
-    // Note: Need to escape $(...) and $variables to prevent premature shell expansion
+    // Escape $(...) and $variables once: \\$ in JS → \$ in string → $ in crontab
     const openclawCmd = getOpenClawCommand();
-    const cleanupCmd = `for id in \\$(${openclawCmd} cron list | grep skills-weekly-report | awk '{print \\\\$1}'); do ${openclawCmd} cron remove \\\\$id; done`;
+    const cleanupCmd = `for id in \\$(${openclawCmd} cron list | grep skills-weekly-report | awk '{print \\$1}'); do ${openclawCmd} cron remove \\$id; done`;
 
     // Add new crontab entry (comment on separate line)
     const newCrontabEntry = `${cleanupMarker}\n0 3 * * * ${cleanupCmd}`;