Security audit
Security checks across malware telemetry and agentic risk
Server-Mate is a real monitoring tool, but it asks for production-level server authority and exposes several high-impact features with weak default scoping or hardening.
Install only after reviewing the exact config. Keep automation.dry_run true, leave auto_ban and auto_heal disabled until commands and allowlists are approved, bind the dashboard to localhost or put it behind authentication, avoid plaintext API keys, disable AI analysis if logs or incident context must not leave your environment, and do not use the curl-to-sudo-bash install path without independent verification.
Never raises — exceptions are caught and returned as an error string.
"""
try:
result = subprocess.run(
cmd,
shell=True,
capture_output=True,"command_text": command_text,
}
try:
completed = subprocess.run(
shlex.split(command_text),
capture_output=True,
text=True,ai_analysis:
enabled: true
simulate: false
endpoint: https://api.openai.com/v1
base_url: https://api.openai.com/v1
model: gpt-4o-mini
api_key: "" # （可选）直接在此处配置大模型 API Key（独立运行时使用，无需配置环境变量）### Post-Alert Automatic Deep Diagnostics When hardware or service alerts trigger, the Agent automatically executes a suite of relevant troubleshooting commands locally (via subprocess) or remotely (via BT-Panel API `exec_shell`). The diagnostic report is appended directly to the webhook alert push message: - **CPU/Memory/Swap alerts**: runs `ps` sorted by usage, `uptime`, `free`, and `dmesg/journalctl` OOM filters. - **Disk/Inode alerts**: runs `df -hT`, `df -i`, and directory scans `du -sh` to locate major space/inode consumers. - **Network/TCP alerts**: runs `ss -s`, `ss -tn state time-wait`, `ip -s link`.
Never raises — exceptions are caught and returned as an error string.
"""
try:
result = subprocess.run(
cmd,
shell=True,
capture_output=True,65/65 vendors flagged this skill as clean.
No suspicious patterns detected.