Local System Info (Iyeque)

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: iyeque-local-system-info Version: 1.1.0 The skill bundle is benign. The `SKILL.md` file accurately describes the skill's purpose and usage, providing standard installation instructions for `psutil` without any prompt injection attempts. The `sysinfo.py` script uses the `psutil` library to gather system metrics (CPU, memory, disk, processes) as described, outputs them in JSON, and handles arguments safely via `argparse`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or other harmful behaviors.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked, the skill can show what programs are running and which local user owns them.

Why it was flagged

The process-list action reads local process metadata, including process names and usernames. This is consistent with the system-monitoring purpose, but it can reveal local activity.

Skill content
for p in psutil.process_iter(['pid', 'name', 'username', 'cpu_percent', 'memory_percent']):
Recommendation

Use the processes action only when you are comfortable sharing local process information with the agent session.

What this means

Installing or running the skill may require fetching psutil from the Python package ecosystem.

Why it was flagged

The skill depends on the external psutil Python package. This dependency is disclosed and central to the stated purpose, but it is not version-pinned in the artifact.

Skill content
"requires": { "bins": ["python3"], "pip": ["psutil"] }
Recommendation

In controlled environments, install psutil from a trusted package source or pin an approved version.