System Monitor

• Analyzed: May 12, 2026, 4:32 AM
• Findings: 0
• Version: 3.0.0
• Hash: e0c48a71a3cf69f2f3496ec39d4ba7ff98e46239846080c7e3b4578852eb9e54
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: jarvis-monitor Version: 3.0.0 The skill bundle provides a client-side web-based system monitor. The `SKILL.md` file contains instructions for users to host the `monitor.html` file and configure an API endpoint, but it does not contain any prompt injection attempts or malicious commands for the OpenClaw agent. The `monitor.html` file's JavaScript generates random data for the dashboard and, despite defining an `API_ENDPOINT` variable, does not actually make any network requests to fetch data from it. There is no evidence of data exfiltration, malicious execution, persistence, or other harmful behaviors. The hardcoded private IP in the HTML is a placeholder, and the documentation instructs users to replace it.