Operator Dashboard

PassAudited by ClawScan on May 3, 2026.

Overview

The skill is a coherent OpenClaw monitoring assistant, but it relies on local command execution, scheduled/proactive alerts, and channel messaging that users should knowingly enable.

This skill appears safe for its stated monitoring purpose if you want OpenClaw health checks and alerts. Before installing, make sure the alert channel is appropriate, understand that it runs local diagnostic commands, and require explicit command-level confirmation before approving any repair or cleanup action.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may run diagnostic commands on the host and read operational status information.

Why it was flagged

The skill tells the agent to run local commands to inspect OpenClaw and host health. This is central to the monitoring purpose, but it is still local command execution.

Skill content
Gateway health — `exec: openclaw status` and `exec: openclaw health --json` ... Disk/memory usage — `exec: df -h /` and `exec: free -m`.
Recommendation

Install only if you want the skill to inspect the local OpenClaw environment, and review any proposed repair action before approving it.

What this means

If approved, fixes could restart services, retry jobs, or remove temporary/log files.

Why it was flagged

The skill may propose actions that modify the system or service state, but the artifact explicitly requires user approval before deleting, restarting, or modifying anything.

Skill content
Offer "fix it" capability ... Log rotation for high disk usage. Restarting a failed service. Retrying a failed cron job. Clearing temporary files. ... Ask before any destructive action
Recommendation

Require the agent to state the exact command or change before approving a fix, especially for deletion, cleanup, or restart actions.

What this means

Gateway failures, cron issues, plugin health, and resource usage may be posted into the active chat/channel.

Why it was flagged

The skill sends monitoring alerts through the current conversation channel. This is disclosed and purpose-aligned, but the alert content may contain operational details.

Skill content
Use the `message` tool for proactive alerts, but only when you have a valid target (the current chat).
Recommendation

Use this skill only in a channel where operational health information is appropriate to share.

What this means

The user may receive daily summaries and immediate critical alerts without manually asking each time.

Why it was flagged

The skill is designed for scheduled and proactive behavior. This is the stated purpose of a monitoring dashboard, but it means the agent may send messages outside a direct user request.

Skill content
Routine daily summary (once per day via cron) ... Severity-based immediate alerts — if any of these occur, notify the user immediately
Recommendation

Confirm the intended cron schedule, target channel, and quiet-hours behavior before relying on proactive alerts.

What this means

There may be confusion about how the skill chooses the alert destination, especially for cron-triggered summaries.

Why it was flagged

The channel-detection description is internally inconsistent. The later instruction narrows behavior to the current conversation, but users should verify where scheduled alerts will be sent.

Skill content
detects your channel from OpenClaw config ... MUST NOT ... Parse OpenClaw config for channel detection — rely on the current conversation context.
Recommendation

Before enabling scheduled summaries, explicitly configure or confirm the destination channel.