System Monitor

• Risk level: Low Risk
• Analyzed: Feb 22, 2026, 2:23 AM
• Findings: 0
• Version: 3.0.0

Overview

The skill is internally consistent: a static single-file dashboard (monitor.html) plus instructions to host it; it does not request credentials, installs, or hidden endpoints.

This is a static dashboard you host. Before deploying, check and (1) replace the hard-coded http://192.168.31.19:8000/healthz with your own HTTPS endpoint, (2) confirm the /healthz JSON does not expose sensitive secrets, (3) avoid serving the monitor publicly without authentication (it exposes service status and logs), (4) review the HTML for any additional external URLs (fonts are used) and CORS implications, and (5) serve over HTTPS to prevent mixed-content or eavesdropping. If you need server-side integration, implement access controls and rate-limiting on the /healthz endpoint.