Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Agent Health Monitor

Monitors agent health status and detects failures for fault-tolerant agent systems. **Trigger scenarios:** - User asks about agent health or status - User me...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 48 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The code implements session listing, liveness checks, resource monitoring, and wrapper status checks which align with an agent health monitor. One unexpected hard-coded target is the '.openclaw/workspace/skills/feishu-evolver-wrapper' wrapper path — this ties the monitor to a specific wrapper component not mentioned in the README.
!
Instruction Scope
SKILL.md describes the monitoring API but does not enumerate the runtime actions the code performs: it executes local shell commands (openclaw CLI, cat /proc files, node lifecycle.js), reads files under ~/.openclaw, and inspects skill workspace contents. Those file and command accesses are broader than the metadata (which declared no config paths) and should be documented.
Install Mechanism
No install spec or external downloads — the skill is a local Node module. No package installation from remote URLs occurs.
Credentials
The package declares no required environment variables or credentials, but the code reads process.env.HOME and accesses files under the user's home directory (~/.openclaw). While HOME is standard, the un-declared config path access (workspace skills directory) is a modest mismatch with metadata and should be documented.
Persistence & Privilege
The skill does not request 'always: true' or modify other skills' configs. It runs on demand or via startMonitoring; autonomous invocation is allowed by default but not a special privilege here.
Assessment
This skill largely does what it claims, but it runs shell commands and reads files under your home directory: it calls the openclaw CLI, reads /proc and /proc/meminfo (Linux-specific), and checks ~/.openclaw and a hard-coded workspace path (feishu-evolver-wrapper) by running node lifecycle.js there. Before installing: (1) review the index.js source to confirm the wrapper path and commands are acceptable in your environment; (2) ensure any lifecycle.js or wrapper code in ~/.openclaw/workspace/skills is trusted (the monitor will invoke it); (3) be aware this runs local commands and inspects files but does not contact external endpoints or request credentials; (4) consider running it in a restricted/sandboxed environment first. If you need tighter assurance, ask the author to document all filesystem paths and shell commands used, or modify the code to make paths configurable rather than hard-coded.
index.js:17
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk97a6y1ekqazap44agek773ak983mgj7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Agent Health Monitor

Monitors agent and session health to detect failures and ensure system reliability.

Usage

const monitor = require('./skills/agent-health-monitor');

// Check all agents health
const health = await monitor.checkHealth();

// Get failed agents
const failed = await monitor.getFailedAgents();

// Monitor continuously
monitor.startMonitoring(30000); // Check every 30s

Features

  • Session Status Check: Verifies active sessions
  • Agent Liveness Detection: Detects unresponsive agents
  • Resource Monitoring: Tracks CPU/memory usage
  • Failure Alerts: Notifies on detected failures

Output

Returns a health report with:

  • Total agents/sessions count
  • Healthy vs unhealthy count
  • Failed agents list
  • Resource usage summary

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…