TencentCloud Websocket Checker
v1.0.0腾讯云 WebSocket 连接延迟检测与性能诊断工具。当用户需要检测 WebSocket 建连延迟、分析 ws/wss 连接各阶段耗时（DNS解析、TCP握手、TLS握手、WebSocket Upgrade）、排查连接慢的问题、对比不同协议/地域的连接性能、或者进行 WebSocket 相关的网络诊断时，使用此...
⭐ 0· 125·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the provided scripts: all code is shell-based tooling (ws_check.sh, batch/report scripts, tests, docs) that measure DNS/TCP/TLS/WS Upgrade timings using curl/dig/awk/sed. No unrelated credentials, cloud APIs, or surprising binaries are requested.
Instruction Scope
SKILL.md and the scripts confine behavior to running network probes against user-supplied WebSocket URLs, optional config.env settings, and local reporting. The scripts do not attempt to read unrelated system files or hidden credentials. They do mention using config.env and permit custom request headers (CUSTOM_HEADERS), which is expected for authenticated endpoints.
Install Mechanism
The skill is instruction-only (no package manager install spec), but includes install_dependencies.sh which runs system package managers (apt/yum/brew) and — on macOS — will run the official Homebrew install bootstrap via a remote GitHub curl|bash command. Installing system packages and invoking a remote installer requires root or shell access and should be reviewed before running. This behavior is proportionate to installing curl/dig/etc but carries the usual risk of executing elevated install scripts.
Credentials
No required env vars are declared. The optional config.env supports CUSTOM_HEADERS (e.g., Authorization tokens) which is reasonable for testing authenticated WebSocket endpoints, but users should avoid placing sensitive long-lived secrets in the config if they will share reports. Scripts reference standard proxy env vars only in troubleshooting docs; they do not steal or require unrelated credentials.
Persistence & Privilege
The skill does not request permanent/always-on presence and does not modify other skills or global agent configuration. install_dependencies.sh may require sudo to install packages (expected for system-level dependency installation).
Assessment
This appears to be a coherent, local shell toolkit for measuring WebSocket connection phases. Before installing/running: (1) review install_dependencies.sh — it will run package manager commands and on macOS may execute the Homebrew bootstrap (a remote script); only run with sudo if you trust it. (2) Inspect config.env and avoid placing sensitive tokens in CUSTOM_HEADERS unless necessary. (3) Run the scripts in a controlled environment (or container) when first testing to confirm behavior. (4) If you don't want automatic network calls, avoid running run.sh (it points at a Tencent example endpoint) and call ws_check.sh only with URLs you control.Like a lobster shell, security has layers — review code before you run it.
latestvk97d17kf1xpd4qcwqam0vx7t4n83647h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.