Data Sentinel Pro

7x24 小时监控网页、商品价格、竞对动态，变化即通知。 Use when: 用户需要监控特定网页的变化（价格、内容、状态）。 NOT for: 一次性数据查询，实时聊天。

Security Scan

The package appears to implement a web-monitoring skill that mostly matches its description, but there are several inconsistencies (paths, duplicated files, unused config fields, and documentation/code mismatches) that warrant caution before installing or trusting credentials to it.

Purpose & Capability

The skill's name/description (web/page/price monitoring) aligns with the included Python monitoring script that fetches pages, computes hashes, extracts prices, stores per-URL state, and sends Telegram notifications. However there are oddities: SKILL.md and README reference storing runtime data under ~/.openclaw/workspace/skills/data-sentinel-pro/data/monitors.json while the scripts actually use ~/.openclaw/data/sentinel and per-URL md5.json files. package.json/metadata versions and paths differ and both monitor.py and scripts/monitor.py are duplicated but identical, which is unnecessary but not by itself malicious.

Instruction Scope

Runtime instructions are generally scoped to monitoring tasks, cron usage, and sending notifications. The SKILL.md suggests using a 'browser skill' to obtain page content, but the script itself uses requests; this mismatch could confuse users. The script reads ~/.openclaw/openclaw.json to obtain the skill config (telegram token/chat id, email settings) and posts to Telegram's API — behaviour expected for notification delivery. Instructions reference fields (license_key, email_pass) that the script does not use or implement, which is inconsistent and increases uncertainty about intended behavior.

Install Mechanism

No install spec is present (instruction-only packaging with included Python scripts). That reduces install-time risk because nothing downloads arbitrary external code at install. The package declares Python runtime and common dependencies (requests, BeautifulSoup).

Credentials

The skill declares no required environment variables but SKILL.md asks users to add sensitive values (telegram_token, telegram_chat_id, email_user/email_pass, license_key) into ~/.openclaw/openclaw.json. Requesting a Telegram bot token and chat id is proportionate to sending notifications; storing SMTP credentials is explainable for email alerts but the script currently does not implement email sending (email logic is commented), and license_key is not used — these unused/extra credential fields are unnecessary and cause mild concern. Users must not commit that config file to version control; the SKILL.md warns of this.

Persistence & Privilege

The skill does not request special platform privileges, does not set always:true, and does not modify other skills. It writes state to a local directory under the user's home (~/.openclaw/data/sentinel) and is intended to be run by cron or manually — this is consistent with a monitoring tool.

What to consider before installing

Things to check before installing or running: - Source verification: the package lists an author and GitHub URL in docs, but the registry 'Source' is unknown and homepage is empty; verify the upstream repository/author and confirm the code hasn't been tampered with. - Config mismatch: the SKILL.md and README reference different storage/config paths (~/.openclaw/workspace/skills/... vs ~/.openclaw/data/sentinel) and example monitors.json; the scripts actually write per-URL files under ~/.openclaw/data/sentinel. Confirm you understand where data and credentials will be stored. - Credentials: the skill will read ~/.openclaw/openclaw.json and use any telegram_token/telegram_chat_id found there to call api.telegram.org. Only provide a bot token with minimal permissions, and do not reuse high-privilege tokens or other service credentials. Prefer creating a dedicated notification bot/account. - Unused/extra fields: SKILL.md asks for license_key and email SMTP creds, but the script does not use license_key and email sending is not implemented; avoid putting secrets in the config unless you confirm the code actually needs them. - Duplicate files & packaging: there are duplicated scripts (monitor.py and scripts/monitor.py) and minor metadata version mismatches; this is likely sloppy packaging rather than malicious, but prefer the code from a verified source. - Network & cron: the script fetches arbitrary URLs and posts to Telegram; if you cron it, be mindful of target URL load and legal/ethical scraping limits. Review cron entries and logs before deploying system-wide. If you want higher assurance: obtain the repository URL from the author and inspect git history, confirm that the code in the published package exactly matches the upstream repo, or run the script in an isolated test account or VM without real credentials to observe behavior. If anything about the source or file inconsistencies cannot be explained, treat the skill with caution.

Data Sentinel Pro - 全能数据监控专家

Pricing - 定价方案

免费版 - $0/月

• 监控 URL: 1 个
• 检查频率：每天 1 次
• 通知方式：无
• 其他功能：基础监控

专业版 - $49/月

• 监控 URL: 10 个
• 检查频率：每 5 分钟
• 通知方式：Telegram/邮件
• 其他功能：实时告警、历史记录

企业版 - $499/月

• 监控 URL: 无限
• 检查频率：每 1 分钟
• 通知方式：Telegram/邮件/SMS/API
• 其他功能：专属部署、API 对接、优先支持

升级方式： 联系 [e-mail] 或访问 https://asmartglobal.com 咨询

When to Run

• 用户说"监控这个页面""盯住这个商品""价格变了通知我"
• 通过 cron 设置的定时任务（每 5 分钟/每小时）
• 批量添加监控任务时

Workflow

1. 解析用户提供的监控目标 URL 和监控规则
2. 使用浏览器技能获取页面内容
3. 提取目标数据（价格、文本、特定元素）
4. 与上次记录的值对比
5. 如果有变化，通过 Telegram/邮件发送警报
6. 记录最新值到本地存储

How to Use

监控商品价格：

@openclaw 盯住这个商品 https://item.jd.com/123456.html 价格低于 1000 通知我

监控网页内容变化：

@openclaw 监控 https://news.ycombinator.com 标题前 5 条有变化就通知

查看已监控列表：

@openclaw 我的监控列表

Configuration

在 ~/.openclaw/openclaw.json 中添加：

{
  "skills": {
    "data-sentinel-pro": {
      "license_key": "<YOUR_LICENSE_KEY>",
      "plan": "free|pro|enterprise",
      "notification": {
        "telegram_token": "<YOUR_TELEGRAM_BOT_TOKEN>",
        "telegram_chat_id": "<YOUR_CHAT_ID>",
        "email_smtp": "smtp.qq.com",
        "email_user": "<YOUR_EMAIL>",
        "email_pass": "<YOUR_EMAIL_AUTH_CODE>"
      },
      "check_interval": 300,
      "max_urls_per_user": 10
    }
  }
}

⚠️ 安全提示： 不要将真实凭据提交到版本控制！使用环境变量或本地配置文件。

Scripts

执行监控任务：

# 手动执行一次检查（核心脚本）
cd ~/.openclaw/workspace/skills/data-sentinel-pro
uv run monitor.py <url> [rule]

# 示例：监控价格变化
uv run monitor.py https://item.jd.com/123456.html price

# 示例：监控内容变化
uv run monitor.py https://example.com content

💡 提示：完整任务管理（添加/删除/状态）通过 OpenClaw 主程序处理，此脚本用于手动检查。

Storage

监控数据存储在 ~/.openclaw/workspace/skills/data-sentinel-pro/data/monitors.json

格式：

{
  "tasks": [
    {
      "id": "task_001",
      "url": "https://example.com/product",
      "selector": ".price",
      "condition": "price < 1000",
      "lastValue": "1299",
      "lastCheck": "2026-03-20T10:00:00Z",
      "notifyVia": ["telegram", "email"],
      "created": "2026-03-20T09:00:00Z"
    }
  ]
}

Notification Templates

价格下降：

🔔 价格提醒！
商品：{product_name}
原价：¥{old_price}
现价：¥{new_price}
降幅：{discount}%
链接：{url}

内容变化：

📄 页面更新提醒！
URL: {url}
变化时间：{time}
变化内容：{diff_summary}

Subscription Management

查看订阅状态：

@openclaw 查看我的 Data Sentinel 订阅

升级套餐：

@openclaw 升级到专业版
@openclaw 升级到企业版

取消订阅：

@openclaw 取消 Data Sentinel 订阅

Support

• 📧 邮箱：[e-mail]
• 🌐 官网：https://asmartglobal.com
• 📚 文档：https://github.com/anson125chen/data-sentinel-pro
• 💬 作者：Anson @ Jiufang Intelligent (Shenzhen)