Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Network Monitor
v1.0.0Comfortably monitor your Internet traffic 🕵️♂️ Based on GyulyVGC/sniffnet (32,966+ GitHub stars). network monitor, rust, application, gui, iced, linux, macos
⭐ 0· 310·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description promise a Network Monitor inspired by a large Rust GUI project (sniffnet, iced, Rust). The actual payload is a single Bash CLI script that reads /sys and /proc and calls system networking tools — functionality consistent with a simple network-monitor, but the README overstates the relationship (mentions GUI, Rust, large star count) and the SKILL header lists runtime: python3 while the shipped script is Bash. This mismatch is misleading but not directly harmful.
Instruction Scope
SKILL.md and the script are generally scoped to monitoring tasks (interfaces, connections, ports, bandwidth, ping, traceroute, DNS, whois, speed). However: (1) a pre-scan found unicode-control-chars in SKILL.md (a prompt-injection signal) — unexpected for this content and worth caution; (2) the script reads system files (/sys/class/net, /proc/net/dev) and MAC addresses (sensitive but expected for network tools); and (3) the speed test command downloads a file from http://speedtest.tele2.net which is an external network action that sends/receives data outside the user's environment. The instructions do not ask for environment variables or secrets.
Install Mechanism
There is no install spec (instruction-only skill) and no package downloads during install. The only code included is a local Bash script. This is low install risk. Note: the runtime header declares python3 even though the script is Bash (incoherent but not an install-time risk).
Credentials
The skill declares no required environment variables, credentials, or config paths, and the script does not read environment variables. It only uses standard system tools and system network files — appropriate for network-monitoring functionality.
Persistence & Privilege
always:false and no installation steps that modify system or other skills. The skill does not request persistent privileges or attempt to modify agent/system configuration.
Scan Findings in Context
[unicode-control-chars] unexpected: The pre-scan detected unicode control characters in SKILL.md which can be used for prompt-injection or rendering tricks. This is not expected for a simple network-monitor README and should be inspected; it may be benign (copy/paste artifact) but could be an attempt to manipulate prompts.
What to consider before installing
This skill is a small Bash CLI network monitor that generally does what it says, but there are a few red flags you should consider before installing: (1) The README and metadata overstate ties to a Rust GUI project and claim runtime: python3 while the shipped script is Bash — a sign the package was assembled hastily or copy-pasted. (2) A static scan found unicode control characters in SKILL.md — inspect the file for hidden characters or manipulation. (3) The speed test downloads a 1MB file from an external URL (speedtest.tele2.net) — if you dislike external network traffic change/remove that command. (4) The script reads MAC addresses and interface stats from /sys and /proc (expected for network tools) — if you need to protect local hardware identifiers don't run it unsecured. Recommended actions: inspect scripts locally, run in a sandbox/VM first, remove or replace the external speed-test URL if unwanted, and verify licensing/attribution claims (header/license mismatches). If you need stronger assurance, request a provenance or source repository from the publisher before using.Like a lobster shell, security has layers — review code before you run it.
latestvk97bsjdz39kq5aw8epkt645z3h82tyfn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.