Recurring JobsCAUTION
A framework for building agentic apps
Overview
A framework for building agentic apps
d31edd75948aOBSERVED · 2026-10-14What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: recurring-jobs description: >- The legacy manage-jobs compatibility surface, job files under jobs/, and cron scheduler internals. Use when maintaining manage-jobs integrations or debugging the scheduler. metadata: internal: true --- # Recurring Jobs (Compatibility) ## Rule Recurring Jobs is the legacy name and API for scheduled automations. Jobs live as resource files under `jobs/` with YAML frontmatter for scheduling metadata. Read `automations` for the product model, trigger types, frontmatter fields, organization scope, and when to prefer `manage-automations` over `manage-jobs`. This skill covers only what is specific to the legacy scheduled path: the `manage-jobs` tool and the cron scheduler behind it. ## How It Works 1. User asks for something recurring via the agent chat 2. Agent uses `manage-jobs` tool (action: "create") to write a job file at `jobs/<name>.md` 3. A scheduler tick finds due jobs about once a minute. Long-running servers fire it in-process; Netlify, Vercel, and Cloudflare fire it from a platform trigger the build emits; AWS Lambda has no trigger, so jobs never fire there 4. Due jobs enter the shared background-automation runner, on the same execution lifecycle as event automations 5. Job results are saved as chat threads ## Connected MCPs in background jobs When a job needs a connected remote MCP, bind the exact advertised `mcp__<server>__<tool>` names through `mcpTools`. The scheduler passes that definition to the shared runner, which resolves only that allowlist under the persisted creator/org request context and never stores or exposes OAuth tokens, URLs, or arbitrary proxy targets. Use an app-owned bounded import/upsert action for writes. Keep provider-specific response mapping, provenance, deduplication, and write policy in the app rather than in core. For example, a job can read meeting notes from any connected MCP and pass normalized action items to an app's idempotent `import` action. ## Job Tool (built in) | Tool | Action | Purpose | | ------------- | ---------- | ---------------------------------------------------------- | | `manage-jobs` | `create` | Create a recurring job (name, cron schedule, instructions); fails if the name exists | | `manage-jobs` | `list` | List all jobs and their status | | `manage-jobs` | `update` | Update schedule, instructions, or toggle enabled | ## Job files an app owns `create` never replaces an existing job file, so a name that collides with an app's file (Factory's `factories/<id>/<name>`) is refused instead of reset. An app that stores its own settings in a job's frontmatter marks the file with `triggerType`, which makes `list`, `update`, and `delete` skip it and sends the caller to `manage-automations`. Edit those files only through the owning app's actions, and patch fields in place; rebuilding a file from the fields the writer knows drops the rest while the job keeps running. Any write to a `jobs/` file that removes a frontmatter field other than run bookkeeping is recorded as a `job-fields-dropped` audit event (org admins read it with `list-audit-events` and `action: "job-fields-dropped"`). Its input names the writer, the dropped fields, and the agent thread and run that made it. ## UI Surface `/agent#jobs` is the stable compatibility URL for the Agent page's **Automations** tab, which lists legacy scheduled jobs alongside trigger-aware automations and is backed by the scoped list/manage actions. Direct users there instead of describing job files when they just want to view or toggle scheduled work. ## Key Files | File | Purpose | | ------------------------------------- | -------------------------------------------------------- | | `packages/core/src/jobs/cron.ts` | Cron parsing (`nextOccurrence`, `isValidCron`, `describeCron`) | | `packages/core/src/jobs/scheduler.ts` | Job execution engine (`processRecurringJobs`) | | `packages/core/src/jobs/tools.ts` | Agent tool (`manage-jobs` with create/list/update actions) | | `packages/core/src/client/agent-page/` | `AgentJobsTab`, the `/agent#jobs` surface | ## Related Skills - `automations` — The primary Scheduled/Event product model - `actions` — How tools and actions work - `delegate-to-agent` — How jobs invoke the agent loop
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (5)
.agents/skills/an
.agents/skills/content-product-development
.agents/skills/design-exploration
.agents/skills/turn-into-app
.agents/skills/visual-edit
Gates applied: no_behavioural_pass.
d31edd75948afull audit observations/trust-audit/skill/builderio__recurring-jobs.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-14 | d31edd75948a | CAUTION | B | 89 | first audit |
Questions
What does the Recurring Jobs skill do?
A framework for building agentic apps
Is Recurring Jobs safe to install?
With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can Recurring Jobs access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (d31edd75948a), read on 2026-10-14. The repository is watched, and a new audit runs when it changes — this is the first audit.
Add this badge to your README
Shows this page's audit result and links back to it. It updates when the audit does.
[](https://modelsatlas.com/skills/builderio/recurring-jobs/)
Not your listing, or something out of date? Claim or update your listing.