Clawhub Skill Infra Watchdog

Self-hosted infrastructure monitoring with local checks for HTTP, TCP, Docker, resources, SSL, DNS, Proxmox, and alerts via WhatsApp, Telegram, or Discord.

Security Scan

The skill mostly matches a local monitoring tool, but there are important mismatches and missing pieces (alert channel credentials, CLI install steps, and some insecure HTTP handling) that make its behavior unclear and warrant caution before installing.

Purpose & Capability

The name/description and included code implement a local infrastructure monitor (HTTP, TCP, Docker, disk, memory, SSL, DNS, Proxmox) which is coherent with the stated purpose. However SKILL.md claims alerts via WhatsApp/Telegram/Discord but neither the manifest nor SKILL.md declare or describe how credentials/tokens/webhooks for those services are provided, which is an unexplained omission.

Instruction Scope

SKILL.md instructs use of an 'infra-watchdog' CLI (init, add-monitor, cron-install, etc.) but the package provides only a single watchdog.py and no install/packaging instructions to make a CLI available on PATH; that mismatch means the runtime instructions are incomplete. The instructions also point at a local config path (~/.openclaw/workspace/infra-watchdog-data/config.json) which the code uses — that part is consistent. Finally, the HTTP checker in code disables SSL verification (ssl.CERT_NONE), which is unexpected given the skill advertises SSL validity checks.

Install Mechanism

No install spec is provided (instruction-only + included Python script). This minimizes remote install risk but is also inconsistent with SKILL.md which expects a ready CLI. The code will be written to the agent bundle and can be executed locally; there is no external download URL or archive to review.

Credentials

The skill declares no required environment variables or primary credential, but its advertised alert channels (WhatsApp/Telegram/Discord) normally require API keys, phone numbers, webhooks, or third‑party services. The code/config shown does not explain where those credentials live or how they are secured. This mismatch could lead to unclear runtime behavior (attempts to reach external endpoints, prompting the user for secrets, or storing tokens locally without guidance).

Persistence & Privilege

always is false and the skill does not request elevated platform privileges. The 'cron-install' command (documented) would create a periodic job if run, which is expected for a monitor but requires user consent. No indication that the skill modifies other skills or system-wide agent configurations.

What to consider before installing

This package appears to implement a local monitoring tool but has several gaps you should clarify before installing: (1) Where/how are WhatsApp/Telegram/Discord credentials or webhooks configured? Verify the code path used to send alerts and confirm you control any external endpoints. (2) SKILL.md expects an 'infra-watchdog' CLI, but there is no install/packaging step — decide how you'll install the Python script (virtualenv, symlink, packaging). (3) The HTTP check disables SSL verification — review whether SSL expiry checks are implemented separately and whether disabling verification is acceptable for your use. (4) Inspect the complete watchdog.py (including truncated parts) to confirm alert-sending code, any network endpoints contacted, and any file writes outside the documented data directory. (5) If you intend to run cron-install, test in a safe environment first. If you cannot review the full code, run the tool in an isolated VM or container and monitor outbound connections and file access before trusting it with production systems.

Infra Watchdog — Infrastructure Monitoring & Health Alerts

Self-hosted infrastructure monitoring for OpenClaw agents. Zero external SaaS required — monitors everything locally and alerts via WhatsApp, Telegram, or Discord.

What It Does

• HTTP/HTTPS endpoint monitoring — checks status codes, response time, SSL validity
• TCP port checks — database, SSH, custom services
• Docker container status — running, stopped, unhealthy
• System resources — CPU, RAM, disk usage with configurable thresholds
• SSL certificate expiry — alerts 30 days before expiry
• DNS resolution checks — verifies domain → IP mappings
• Proxmox VM/CT status — checks via local API
• Alerts via WhatsApp/Telegram/Discord — with configurable cooldown

Quick Start

# Initialize data directory & config
infra-watchdog init

# Add your first monitor
infra-watchdog add-monitor --type http --name "My API" --url https://myapi.example.com

# Add a TCP port check
infra-watchdog add-monitor --type tcp --name "PostgreSQL" --host localhost --port 5432

# Add a Docker container check
infra-watchdog add-monitor --type docker --name "My App" --container myapp

# Run all checks now
infra-watchdog check

# View current status dashboard
infra-watchdog dashboard

# Install auto-check cron (every 5 min)
infra-watchdog cron-install

Commands

Command	Description
infra-watchdog init	Set up data directory and default config
infra-watchdog add-monitor	Add a new monitor (http/tcp/docker/resource/ssl/dns)
infra-watchdog list	List all configured monitors and their current state
infra-watchdog check	Run all checks immediately
infra-watchdog check --name <name>	Run a specific monitor
infra-watchdog status	Summary: UP/DOWN/WARN counts
infra-watchdog dashboard	ASCII dashboard with all monitors
infra-watchdog cron-install	Install auto-check cron job

Monitor Types

HTTP/HTTPS

infra-watchdog add-monitor \
  --type http \
  --name "Main API" \
  --url https://api.example.com/health \
  --expected-status 200 \
  --timeout 5

TCP Port

infra-watchdog add-monitor \
  --type tcp \
  --name "Postgres" \
  --host 192.168.1.10 \
  --port 5432

Docker Container

infra-watchdog add-monitor \
  --type docker \
  --name "Nginx" \
  --container nginx-proxy

System Resources

infra-watchdog add-monitor \
  --type resource \
  --name "Disk /" \
  --resource disk \
  --path / \
  --warn-at 80 \
  --alert-at 90

SSL Certificate

infra-watchdog add-monitor \
  --type ssl \
  --name "My Domain SSL" \
  --host example.com \
  --port 443 \
  --warn-days 30

Configuration

Edit ~/.openclaw/workspace/infra-watchdog-data/config.json:

{
  "alert_channel": "whatsapp",
  "alert_cooldown_minutes": 15,
  "check_interval_minutes": 5,
  "ssl_expiry_warning_days": 30
}

Alert Channels

Channel	Config value
WhatsApp	"whatsapp"
Telegram	"telegram"
Discord	"discord"
None (log only)	"none"

Use Cases

Homelab Monitoring

Track all your self-hosted services: Proxmox, Docker stacks, databases, Jellyfin, Home Assistant, etc. Get a WhatsApp alert the moment anything goes down.

API Uptime Monitoring

If you sell API services on RapidAPI, this skill monitors your endpoints 24/7 and pings you before customers notice an outage.

SSL Expiry Prevention

Never let a certificate expire again. Get a WhatsApp warning 30 days before expiry.

Resource Alerts

Disk full at 3am? Get alerted before it kills your services.

Data Storage

All data stored locally at ~/.openclaw/workspace/infra-watchdog-data/. SQLite database, no cloud sync, no telemetry.

Requirements

• Python 3.8+
• Docker (optional, for container monitoring)
• OpenClaw 1.0+

Source & Issues

• Source: https://github.com/mariusfit/infra-watchdog
• Issues: https://github.com/mariusfit/infra-watchdog/issues
• Author: @mariusfit