System Monitor

PassAudited by VirusTotal on May 4, 2026.

Overview

Type: OpenClaw Skill Name: dinghaibin-system-monitor Version: 1.0.0 The skill is a standard system monitoring tool that collects CPU, memory, disk, and process metrics using the /proc filesystem and local utilities like 'df' and 'ps'. The implementation in scripts/monitor.py uses safe subprocess calls (list-based) and contains no network communication, data exfiltration, or persistence logic. A minor bug exists in the print_status function (referencing an undefined 'upload' variable instead of 'uptime'), but there is no evidence of malicious intent.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the agent displays or stores the process list, it may reveal sensitive command-line arguments from running programs.

Why it was flagged

The script collects process command lines for the top-processes feature. This is purpose-aligned, but command-line arguments can sometimes include tokens, passwords, or other sensitive values.

Skill content
result = subprocess.run(['ps', 'aux', '--sort=-%cpu'], capture_output=True, text=True) ... 'command': ' '.join(fields[10:])
Recommendation

Use the process-list feature only when needed, and review output before sharing it outside the local troubleshooting context.

What this means

Watch mode can keep producing output and consuming some system resources until it is stopped.

Why it was flagged

The script supports a continuous monitoring loop. This is disclosed by the --watch option and appears to run in the foreground until interrupted.

Skill content
while True: ... if args.watch: time.sleep(args.interval)
Recommendation

Run --watch only when continuous monitoring is intended, choose a reasonable interval, and stop it with Ctrl-C when finished.