SRE Log Analytics

Security checks across malware telemetry and agentic risk

Overview

This instruction-only log analysis skill is purpose-aligned, but it may inspect sensitive logs and optionally save or share reports, so users should scope what it reads and review before sharing.

Install only if you want the agent to help inspect logs you explicitly provide or identify. Keep analysis scoped to specific files and time ranges, redact secrets or personal data from log excerpts, and approve any Markdown export or Feishu sharing before it happens.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

The agent may read log content you provide or point it to, and that content could include secrets, identifiers, errors, or infrastructure details.

Why it was flagged

The skill directs the agent toward local system/application log locations. This is expected for log analytics, but those files can contain sensitive operational or user data.

Skill content
Determine the log file path (system logs are usually in `/var/log/`, application logs are determined by deployment location)
Recommendation

Use narrow log paths and time ranges, avoid unnecessary privileged log access, and redact sensitive values before including samples in reports.

#
ASI07: Insecure Inter-Agent Communication
Medium
What this means

If a report is exported to Feishu, log-derived details may leave the local conversation and become visible according to the document's sharing permissions.

Why it was flagged

The skill discloses optional external/cloud sharing of generated log reports. This is user-directed and purpose-aligned, but report contents may include sensitive log excerpts.

Skill content
Can be further created as a Feishu cloud document for sharing
Recommendation

Only create cloud documents after explicit approval, use an approved workspace/account, restrict sharing permissions, and remove secrets or personal data from log samples.