Skill
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears to be a disclosed monitoring tool, but it requires Telegram/OpenClaw tokens and installs recurring cron checks.
Before installing, make sure you are comfortable storing Telegram and OpenClaw gateway tokens locally and running scheduled checks every 15 minutes. The behavior is disclosed and purpose-aligned; verify the target Telegram chat, keep token files restricted, and uninstall the cron jobs when you no longer need monitoring.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing it means a local config file will hold tokens that can send messages through your Telegram bot and use your local OpenClaw gateway for probes.
The skill requires and stores credentials so it can send Telegram alerts and authenticate to the local OpenClaw gateway; this is sensitive but disclosed and purpose-aligned.
The env file contains sensitive tokens (Telegram bot token, gateway token). The setup script sets permissions to `600`
Use a dedicated Telegram bot/chat if possible, keep the env file owner-only, and rotate the Telegram or gateway token if the file is exposed.
The monitor will continue running on a schedule after setup and may send Telegram alerts or make small latency probes until removed.
The setup script installs persistent cron jobs to run the status and latency checks every 15 minutes; this background behavior is disclosed and central to monitoring.
echo "*/15 * * * * $PYTHON3 $STATUS_SCRIPT >> /dev/null 2>&1 # claude-watchdog"
Review the cron entries after setup and use `setup.sh --uninstall` if you no longer want the recurring checks.