Web Monitor

• Analyzed: May 14, 2026, 4:02 AM
• Findings: 1
• Version: 3.5.0
• Hash: a2db0273a0036e90b783c6c7f20148dca602a104c981b18308df59b7d8ae2ea0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle 'web-monitor-pro' is classified as benign. The Python script `scripts/monitor.py` implements web page monitoring functionalities as described in `SKILL.md`, including fetching URLs, tracking changes, and sending user-configured webhooks. Critical review of `subprocess.run` for `curl` shows arguments are passed as a list, mitigating shell injection risks. Data storage is local to the user's home directory, and webhook payloads contain only operational monitoring data. There is no evidence of intentional harmful behavior such as credential theft, unauthorized data exfiltration to hardcoded external endpoints, persistence mechanisms, or malicious prompt injection attempts in `SKILL.md`.