Topic Monitor
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If enabled, the monitor can keep running on a schedule and produce alerts until the cron jobs are removed.
The skill can create cron jobs for ongoing scheduled monitoring; this is expected for its purpose and a removal path is documented.
python3 scripts/setup_cron.py --auto # Remove cron jobs python3 scripts/setup_cron.py --remove
Only run the cron setup if you want continuous monitoring, and keep the documented remove command available.
Providing these values lets the skill use your chosen search providers and alert destinations.
The skill may use optional channel identifiers and search-provider API keys; these are disclosed and aligned with alerting and search.
`TOPIC_MONITOR_TELEGRAM_ID` | — | Telegram chat ID for alerts ... `SERPER_API_KEY` / `TAVILY_API_KEY` / `EXA_API_KEY` / `YOU_API_KEY` ... Optional search-provider vars forwarded via subprocess env allowlist
Use least-privilege API keys where possible and verify alert channel IDs before enabling them.
Alerts or summaries may be influenced by, or reference, information from past conversations.
The skill advertises use of prior conversation context in alerts; this can be useful, but it involves sensitive personal context.
- 🧩 **Memory Integration** - Contextual alerts referencing your past conversations
Review memory or learning settings before enabling contextual alerts, especially for external channels.
Alert content may be passed from the monitoring script to the agent and then to Telegram or Discord.
Alert delivery is mediated through an OpenClaw agent/message tool boundary; this is disclosed and purpose-aligned.
`monitor.py` now emits `DISCORD_ALERT` JSON lines and your OpenClaw agent delivers them via the message tool (same pattern as Telegram).
Confirm what alert content will be sent and to which channel before enabling external delivery.