Disk Usage Watcher

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is coherently aimed at checking disk usage, with disclosed command execution, notifications, and scheduled monitoring that users should understand before enabling.

This appears safe for its stated purpose, but install it only if you want periodic disk monitoring. Confirm that any cron schedule is explicit and removable, limit monitored paths if needed, and ensure the exec capability is used only for disk-usage commands.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may run local disk inspection commands and report usage information.

Why it was flagged

The skill discloses local command execution to run disk-usage checks. This is expected for disk monitoring, but command execution should remain limited to the intended df-style operations and user-selected paths.

Skill content
`openclaw/exec` - For running df commands
Recommendation

Use the skill only for disk checks, and avoid letting it run arbitrary shell commands or inspect paths beyond what you intend to monitor.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If enabled, the skill may keep checking disk usage and sending alerts on a schedule.

Why it was flagged

The skill describes recurring scheduled operation. This is aligned with monitoring, but it is persistent autonomous behavior that should be intentionally configured and removable.

Skill content
The agent can call this skill directly or it runs automatically via cron every 15 minutes.
Recommendation

Confirm where any cron schedule is installed, how alerts are sent, and how to disable the schedule when no longer needed.

What this means

The skill may need execution and notification capabilities even though those are not reflected in the registry capability signals.

Why it was flagged

The skill references runtime capabilities, while the supplied registry information says there is no install spec and no derived capability tags. This is an under-declaration/packaging clarity issue rather than evidence of unsafe behavior.

Skill content
## Dependencies
- `openclaw/exec` - For running df commands
- `openclaw/notify` - For sending alerts
Recommendation

Before installing, verify that the platform will grant only the expected exec and notify capabilities and that no additional helpers are being installed.