Port Manager
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent local port-management helper, but it can inspect local processes, store port records, and terminate a process when the user confirms.
Install only if you want a local helper for port conflicts. Before using free/check, verify the listed process and port, confirm only intentional terminations, and consider clearing the bundled port records so the skill starts with your own environment data.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the wrong port or process is confirmed, a local service could be stopped and work handled by that service could be disrupted.
The skill exposes a port-freeing action that terminates the process using the selected port after a confirmation prompt; this is purpose-aligned but high-impact.
echo "是否释放? (y/n)" ... if [ "$confirm" = "y" ] || [ "$confirm" = "Y" ]; then
kill $pidUse query/list first, verify the process name and PID, and only confirm free/check actions for services you intentionally want to stop.
The skill may fail or require manual tool installation, and users have limited upstream provenance information.
The artifacts include shell scripts that depend on local CLI tools, but the registry metadata does not declare prerequisites or provenance beyond the package contents.
Source: unknown; Homepage: none; Install specifications: No install spec — this is an instruction-only skill; Required binaries ... none
Review the included script before use and make sure expected local tools such as bash, lsof, and jq are present from trusted sources.
An agent or user could see misleading preloaded records, and stored service/port names can reveal details about a local environment if shared.
The package includes non-empty persistent service/port records; these records are local environment metadata and may be stale or unrelated to the installing user.
{"service": "ARDAgent", "port": "3283", "recorded_at": "2026-03-11 02:22"}, ... {"service": "GitHub", "port": "49160", "recorded_at": "2026-03-11 02:22"}Clear or review the bundled ports.json on first use, and avoid sharing port records if they reveal private services.