Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

asclaude-monitor

v1.0.0

Monitors system resources, manages scheduled tasks, tracks background jobs, and sends proactive alerts to ensure stable automated workflows in OpenClaw.

0· 81·0 current·0 all-time
bySherman Schulist@miaoxingjun

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for miaoxingjun/asclaude-monitor.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "asclaude-monitor" (miaoxingjun/asclaude-monitor) from ClawHub.
Skill page: https://clawhub.ai/miaoxingjun/asclaude-monitor
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install asclaude-monitor

ClawHub CLI

Package manager switcher

npx clawhub@latest install asclaude-monitor
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The described purpose (monitor system resources, cron tasks, sub-agent tracking) matches the included scripts which check disk usage and call 'openclaw cron list' and 'openclaw gateway status'. However the package metadata does not declare that the 'openclaw' CLI is required, and the README/SKILL.md claim proactive push notifications (e.g., Feishu) though no code or env vars implement that. These are inconsistencies but not evidence of malicious intent.
Instruction Scope
SKILL.md simply instructs the user to run the two Python scripts. The scripts operate locally: they read ~/.openclaw/workspace for disk stats and invoke 'openclaw' subcommands via subprocess.run. They do not exfiltrate data or contact external endpoints. The discrepancy is that SKILL.md promises alerting/push integrations which are not implemented in the included scripts.
Install Mechanism
No install spec (instruction-only with small included scripts). Nothing is downloaded or written during installation. Risk from install mechanism is low.
Credentials
The skill declares no required environment variables or credentials, and the scripts do not access secrets. However, they do rely on an external 'openclaw' binary and a workspace path (~/.openclaw/workspace) that are not declared in the metadata; the omission reduces transparency and should be corrected.
Persistence & Privilege
always is false and the skill does not request persistent or system-wide privileges, nor does it modify other skills or global agent configs. It is user-invocable only, which is appropriate for its functionality.
What to consider before installing
This skill appears small and mostly benign, but take these precautions before installing or running it: 1) The scripts call the 'openclaw' CLI and reference ~/.openclaw/workspace but the metadata doesn't declare that dependency—ensure you trust and have the 'openclaw' binary on PATH. 2) SKILL.md/README claim push notifications (Feishu/chat) but no push code or credentials are present; if you need that feature ask the author for implementation or a secure webhook setup. 3) The Python files use subprocess.run to invoke 'openclaw'—review the scripts yourself and run them in a sandbox or restricted environment first. 4) If you plan to run regularly, request that the author update metadata to list required binaries and document any network or credential requirements. These steps will reduce risk and clarify intent.

Like a lobster shell, security has layers — review code before you run it.

latestvk973bmxf1k7hdjq00m29c5p8pn848050
81downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

asclaude-monitor: 智能任务与系统健康监控中心 📊🔔

从“被动响应”到“主动关怀”,让您的 AI 助手拥有全天候的系统感知力。

🌟 核心亮点

asclaude-monitor 是 OpenClaw 环境下的“运维驾驶舱”。它集成了系统资源监视、定时任务管家以及异步任务追踪功能。通过这套工具,黑米能够主动发现环境隐患,确保您的自动化流程(如股票监控、新闻抓取)稳定运行,不再出现“静默失败”。

🚀 功能详解

  1. 系统健康自检 (Health Check):
    • 磁盘与内存: 实时监控工作区存储空间,防止日志或归档文件占满磁盘。
    • 网关状态: 快速确认 OpenClaw Gateway 是否在线,排查网络连接问题。
  2. Cron 任务管家:
    • 一键清单: 优雅地列出所有定时任务,包含运行时间表和状态。
    • 主动预警: 配合 Heartbeat 机制,定期检查关键任务是否执行成功。
  3. 子代理追踪 (Sub-agent Watch):
    • 监控后台运行的复杂任务进度。
    • 当任务卡死或超时时,提供快速响应建议。
  4. 主动提醒引擎:
    • 在关键节点(如任务完成、系统空闲)主动通过飞书或聊天窗口推送状态。

🛠️ 使用指南

  • 运行健康检查: python scripts/health_check.py
  • 查看定时任务: python scripts/cron_manager.py

由 黑米 (HeiMi) 为您打造的 AI 运维中枢,让每一次自动化运行都心中有数。 🌾

Comments

Loading comments...