Ssl Watcher

Monitors SSL certificate validity and domain expiry dates with configurable alerts to prevent outages and security issues on your web domains.

Security Scan

The skill's code and runtime instructions are consistent with an SSL/domain-expiry monitor; it does not request unrelated credentials or install arbitrary remote code, though there are a few minor misleading/quirky items to review before installing.

Purpose & Capability

Name/description match the included code: ssl_watcher.py performs TLS checks, banner grabs, and (per SKILL.md) WHOIS lookups. Nothing in the files requests unrelated cloud credentials or system-wide access. Slight mismatch: SKILL.md references Discord commands and paid tiers, but the code does not implement a Discord integration — that is a documentation cue only.

Instruction Scope

Runtime instructions and code stay within the declared purpose: they open TCP/HTTPS connections to target hostnames, fetch certs, read HTTP headers, and perform banner grabs/WHOIS-like lookups. The included edgeiq_licensing module reads files under the user's home (~/.edgeiq/license.key and ~/.edgeiq/stripe_licenses.json) and checks EDGEIQ_LICENSE_KEY / EDGEIQ_EMAIL environment variables for licensing — these are licensing-related but not declared in SKILL.md and are worth reviewing. There are no instructions to read unrelated system files or exfiltrate data to unknown endpoints.

Install Mechanism

No remote install/downloads or extract steps. Skill is instruction-only install (copy files into skills dir) and ships Python source. This is low-risk compared to fetching arbitrary binaries from the network.

Credentials

No required env vars declared in registry metadata, which is consistent with operation. The license module does read optional EDGEIQ_LICENSE_KEY and EDGEIQ_EMAIL environment variables and a license file in ~/.edgeiq; the code also contains a hard-coded author email that auto-grants a license — odd but limited to licensing logic and not necessary for core functionality. No unrelated credentials (AWS, GCP, etc.) are requested.

Persistence & Privilege

The skill does not request 'always: true' or attempt to modify other skills or system-wide settings. It stores/reads licensing data from a per-user ~/.edgeiq path only, which is confined and expected for a license check.

Assessment

This appears to be a coherent SSL/domain monitoring skill that will open network connections to any domain you ask it to scan. Before installing: 1) Review ssl_watcher.py and edgeiq_licensing.py locally to confirm no unexpected network endpoints or telemetry; 2) note that the license checker reads/writes ~/.edgeiq/* and checks EDGEIQ_LICENSE_KEY/EDGEIQ_EMAIL — if you don't want that behavior remove or inspect edgeiq_licensing.py; 3) the SKILL.md mentions Discord commands and paid tiers but the code does not embed Discord integration — treat the Discord notes as documentation only; 4) run the tool in a controlled environment first (no sensitive credentials) and only point it at domains you own or are authorized to scan.

SSL & Domain Expiry Watcher

Skill Name: ssl-watcher
Version: 1.1.0
Category: Security / Monitoring
Price: Free (v1) / $9 Pro / $39 Bundle
Author: EdgeIQ Labs
OpenClaw Compatible: Yes — Python 3, pure stdlib + socket, WSL + Windows

---

What It Does

Monitors SSL certificate health and domain expiry dates for your web properties. Catch expired certs, misconfigured chains, and domains about to lapse before they become emergencies.

⚠️ Legal Notice: Only monitor domains you own or have explicit written permission to audit. Unauthorized recon is illegal.

---

Features

• SSL Certificate Check — issuer, validity window, chain completeness, protocol versions, cipher strength
• Domain Expiry Check — WHOIS registration and expiration data via socket lookup
• Days-to-Expiry Alerting — configurable warning thresholds (30/14/7/3 days)
• Batch Monitoring — check multiple domains in one run
• Silent Mode — full report, no stdout noise unless issues found
• Pure Python — no external dependencies beyond stdlib + socket

---

Installation

cp -r /home/guy/.openclaw/workspace/apps/ssl-watcher ~/.openclaw/skills/ssl-watcher

---

Usage

Check SSL for a Domain

python3 ssl_watcher.py --domain example.com

Check Multiple Domains

python3 ssl_watcher.py --domains example.com store.example.com api.example.com

With Expiry Threshold Alerts

python3 ssl_watcher.py --domain example.com --warn-days 30

Full Report (all details)

python3 ssl_watcher.py --domain example.com --verbose

As OpenClaw Discord Command

In #edgeiq-support channel:

!ssl example.com
!ssl example.com store.example.com api.example.com
!ssl example.com --warn-days 14
!domain example.com

---

Parameters

Flag	Type	Default	Description
--domain	string	—	Single domain to check
--domains	list	—	Multiple domains to check (space-separated)
--warn-days	int	30	Alert if cert/domain expires within this many days
--verbose	flag	False	Show full chain and protocol details
--check-http	flag	False	Also verify site is reachable over HTTPS
--output	string	—	Write JSON report to file

---

Output Example

=== SSL Watcher Report ===
example.com
  Status:      ✔ Valid
  Issuer:       Let's Encrypt
  Valid From:  2026-01-15
  Expires:     2026-04-15
  Days Left:   23  ⚠ WARN
  Chain:       complete
  Protocols:   TLS 1.2, TLS 1.3

store.example.com
  Status:      ✔ Valid
  Issuer:      GlobalSign
  Expires:     2026-07-20
  Days Left:   120

---

Tier Comparison

Feature	Free	Pro ($9/mo)	Bundle ($39/mo)
Single domain check	✅	✅	✅
Multiple domains	—	✅ (up to 10)	✅ (unlimited)
WHOIS expiry data	—	✅	✅
Expiry warning thresholds	—	✅	✅
JSON report export	—	✅	✅
Weekly automated scan	—	—	✅
Email alert on expiry	—	—	✅

---

Pro Upgrade

Add Pro to monitor up to 10 domains with WHOIS data, configurable warning thresholds, and JSON export:

👉 Upgrade to Pro — $9/mo

Bundle Deal

Get everything — unlimited domains, weekly automated scans, and email alerts — in the EdgeIQ Bundle:

👉 Get the Bundle — $39/mo

---

Support

Need a custom check or bulk monitoring? Open a ticket in #edgeiq-support or email [e-mail].