WebsiteMonitor

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill appears to match its website-monitoring purpose, but users should understand it creates recurring HTTP checks and stores monitoring history locally.

Before installing or using this skill, confirm that the target URLs are authorized to monitor, choose safe local storage locations for the database and reports, and make sure any recurring scheduler can be stopped or removed when no longer needed.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The system may generate recurring network traffic to the configured websites.

Why it was flagged

The generated monitor will repeatedly make HTTP GET requests to configured targets. This is central to the skill's purpose, but users should only monitor URLs they are authorized to check.

Skill content
每 5 分钟一次的 HTTP 状态码 + 响应时延探测 ... resp = requests.get(url, timeout=timeout, allow_redirects=True)
Recommendation

Configure only intended, authorized targets and review the check interval before running the generated monitor.

What this means

Local monitoring records could expose which sites or internal services are being watched if the files are shared or left unprotected.

Why it was flagged

The design stores monitored URLs, status codes, latency, and error text locally for up to 90 days. This is expected for monitoring, but the data may reveal private service names or availability history.

Skill content
数据持久化存储(SQLite 或 JSON 文件) ... data_retention_days": 90 ... CREATE TABLE IF NOT EXISTS checks ... url ... status ... latency ... error
Recommendation

Store the database and reports in an appropriate directory, restrict access if monitoring private services, and adjust retention as needed.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

A scheduled monitor may continue running and producing reports until the user stops or removes it.

Why it was flagged

The skill is intended to create scheduled, recurring activity. This persistence is disclosed and purpose-aligned, but it should remain under the user's operational control.

Skill content
能够每5分钟检测目标网站的HTTP状态码和响应时延,并在每天早上9点自动生成一份基于监控数据的HTML网页报告 ... scheduler.py # 定时任务入口
Recommendation

Use a scheduler setup you understand, document how to stop it, and avoid enabling it automatically in environments where recurring network activity is not desired.