Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

网页内容监控

网页内容监控助手。监控指定网页的内容变化,检测关键词出现或消失,支持变化时自动告警。当用户需要:监控竞品官网动态、追踪政策页面变化、监控新闻更新、检测网站内容变更、设置关键词告警时使用此技能。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 38 · 0 current installs · 0 all-time installs
byxuyongliang@xuyongliang-eccom
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The stated purpose is web content monitoring. The included scripts/monitor_page.py implements single-run page fetch, diff-by-hash, and keyword detection which is coherent with the core purpose. However, the SKILL.md advertises additional capabilities (scheduling, enterprise push to WeCom/Feishu/DingTalk, a schedule_monitor.py script) that are not present in the package. That discrepancy means the published description overstates capabilities.
!
Instruction Scope
SKILL.md instructs use of scripts/schedule_monitor.py, cron scheduling examples, and push-channel configuration, but the repository only contains scripts/monitor_page.py. The monitor script also ignores the --hash-file argument and always writes to ~/.web_monitor/hashes.json. Instructions therefore reference non-existent files and features and grant implied authority (sending alerts) that is not implemented here.
Install Mechanism
No install spec is present (instruction-only + one local script). No external downloads or third-party package installs are performed by the skill itself, which keeps install risk low.
!
Credentials
The skill declares no required environment variables or credentials, yet the documentation mentions enterprise push channels (WeCom/Feishu/DingTalk) that would normally require API tokens/config. Those credentials are neither declared nor implemented, an inconsistency that could lead users to supply sensitive tokens later or run unpublished code to handle them. The script does read/write to the user's home directory (~/.web_monitor) which is proportionate for local state but should be noted.
Persistence & Privilege
The skill is not force-installed (always: false) and does not modify other skills or system-wide agent settings. It persists data only under ~/.web_monitor, which is limited scope; this is expected for a local monitoring tool.
What to consider before installing
This package contains a usable single-run monitor (scripts/monitor_page.py) that fetches a page, compares it to the last saved snapshot, and reports keyword changes — it stores full page content under ~/.web_monitor/hashes.json. However, the README (SKILL.md) advertises scheduling and push-notification features (schedule_monitor.py, WeCom/Feishu/DingTalk integration) that are not included. Before installing or using: 1) Do not assume scheduling or alerts exist — the missing files mean those features are not implemented here. 2) Review and, if needed, implement secure push integrations yourself; do not supply API tokens to unknown code. 3) Be aware the script stores entire page HTML locally (could include sensitive information); if that’s a concern, modify it to sanitize or limit stored data. 4) The --hash-file CLI flag is present but ignored by the script — if you need custom storage paths, update the code. If you only need manual, one-off checks, this script is likely fine; if you expect the advertised scheduling/alerting, treat this package as incomplete and investigate or obtain the missing components before trusting it.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
automationvk97f16jbtsb5st8s407yk0305183nw98contentvk97f16jbtsb5st8s407yk0305183nw98latestvk97f16jbtsb5st8s407yk0305183nw98monitorvk97f16jbtsb5st8s407yk0305183nw98webvk97f16jbtsb5st8s407yk0305183nw98

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Web Content Monitor

网页内容监控助手。监控网页变化,关键词出现或消失时触发告警。

核心能力

  1. 页面抓取 — 定期获取目标页面内容
  2. 变化检测 — 对比历史版本,发现新增或删除内容
  3. 关键词监控 — 检测特定关键词出现/消失
  4. 告警推送 — 支持企业微信、飞书、钉钉推送

快速开始

监控单个页面

python3 scripts/monitor_page.py --url "https://example.com/news" --keywords "发布,融资,合作"

创建定时监控任务

python3 scripts/schedule_monitor.py --url "https://example.com" --keywords "融资" --schedule "0 */6 * * *"

脚本说明

scripts/monitor_page.py

单次监控页面变化。

python3 scripts/monitor_page.py --url <URL> --keywords <关键词,分隔> [--hash-file <历史文件>]

参数:

  • --url: 监控目标 URL
  • --keywords: 逗号分隔的关键词列表
  • --hash-file: 历史快照存储路径(默认 ~/.web_monitor/)

scripts/schedule_monitor.py

创建定时监控任务。

python3 scripts/schedule_monitor.py --url <URL> --keywords <关键词> --schedule "<cron>" [--channel <wecom|feishu|ddingtalk>]

典型场景

竞品动态监控

python3 scripts/monitor_page.py \
  --url "https://www.example.com/press" \
  --keywords "融资,上市,合作,收购"

政策页面追踪

python3 scripts/schedule_monitor.py \
  --url "https://www.miit.gov.cn/政策页" \
  --keywords "新规,实施,办法" \
  --schedule "0 9 * * *" \
  --channel wecom

配置说明

监控存储路径

默认:~/.web_monitor/

  • hashes.json — 页面哈希记录
  • snapshots/ — 历史快照

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…