Skylv System Health Watch

PassAudited by VirusTotal on May 4, 2026.

Overview

Type: OpenClaw Skill Name: skylv-system-health-watch Version: 1.0.0 The skill is a legitimate health monitoring utility for AI agents, designed to track memory usage, API performance, and error rates. The implementation in `health_monitor.js` uses standard Node.js built-in modules (`os`, `fs`) to collect local system metrics and manage a local history file. No evidence of data exfiltration, unauthorized network access, or malicious execution was found in the code or the instructions.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the skill executes the included script locally and can create or overwrite its own health-monitor files.

Why it was flagged

The skill is operated by running a local JavaScript helper. This is central to the stated purpose, but it means local code executes with the user's normal permissions.

Skill content
node health_monitor.js status ... node health_monitor.js check ... node health_monitor.js report json
Recommendation

Run it only from the reviewed skill directory, and avoid executing modified copies unless you have reviewed them.

What this means

Generated reports or local history files could reveal endpoint names, stack traces, or other diagnostic context if shared.

Why it was flagged

The monitor stores local health history/alert settings and tracks error stack/context data. This is appropriate for diagnostics, but such outputs may include operational details.

Skill content
const HISTORY_FILE = '.health-history.json'; const ALERTS_FILE = '.health-alerts.json'; const MAX_HISTORY = 1000; ... stack: error.stack?.slice(0, 500), context
Recommendation

Keep generated `.health-*.json` files private, review reports before sharing them, and avoid passing secrets into error context.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If started, the monitor may continue consuming resources and updating local state until the process is stopped.

Why it was flagged

The skill includes a disclosed continuous monitoring mode. There is no evidence of hidden background persistence, but watch mode can keep running until stopped.

Skill content
# Continuous monitoring
node health_monitor.js watch 3000
Recommendation

Use watch mode only when you want live monitoring, choose a reasonable interval, and stop the process when finished.