Batch Search Monitor

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a straightforward search-monitoring skill, but users should notice that it creates recurring monitoring tasks and uses a user-directed installer with limited provenance details.

Before installing, make sure you trust the ClawHub/npm installer path and understand that monitor tasks may keep running on the chosen interval. Avoid using highly sensitive private keywords if alerts or exports may be stored or sent outside your local workflow.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing via an unpinned latest package may run whatever version is current at install time.

Why it was flagged

The documented install path uses an unpinned '@latest' package invocation. It is user-directed and purpose-aligned, but users should verify they trust the package source.

Skill content
npx clawhub@latest install batch-search-monitor
Recommendation

Install only from trusted ClawHub/npm sources, and pin or verify the package version if reproducibility matters.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

A monitor task could continue performing searches and generating alerts until the user removes it.

Why it was flagged

The skill is designed to create recurring search-monitor tasks. This persistence is clearly disclosed and a removal command is documented.

Skill content
定时自动搜索 ... --interval 60 ... monitor remove --task-id 1
Recommendation

Confirm the keywords, interval, and notification settings before adding a monitor, and remove tasks when monitoring is no longer needed.