system-monitor-tool

PassAudited by ClawScan on May 1, 2026.

Overview

This is a straightforward local system monitor; it runs standard shell diagnostics and may display local process, network, disk, and folder details, but the artifacts do not show credential use, exfiltration, or destructive actions.

This skill is reasonable for local system monitoring. Before installing, be aware that its outputs can include process lists, network addresses, disk usage, and home-folder names; review output before sharing it and avoid watch mode unless you intend to run a continuous monitor.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You are relying on the registry-provided script rather than a clearly linked upstream project, and the skill may fail on systems without the expected standard utilities.

Why it was flagged

The package has limited provenance metadata and no declared install requirements, though the complete shell script is included and no remote installer or hidden helper is shown.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill; Code file presence: scripts/monitor.sh
Recommendation

Review the included script before installing and prefer a package that declares its runtime requirements and upstream source.

What this means

When invoked, the skill will run commands on your machine to collect system status.

Why it was flagged

The skill directs the agent to run a bundled bash script. Shell execution is central to local system monitoring and is not hidden, but users should understand it executes local commands.

Skill content
bash skills/system-monitor-1.0.0/scripts/monitor.sh status
Recommendation

Install only if you are comfortable with local diagnostic shell commands being run for monitoring requests.

What this means

Command output may include local system details that you may not want copied into chats, logs, or shared troubleshooting reports.

Why it was flagged

The script uses standard diagnostic tools that can reveal process command lines, home-directory folder names and sizes, network interface details, and an outbound connectivity check. These are purpose-aligned but privacy-relevant.

Skill content
ps aux --sort=-%cpu | head -$((top + 1)); du -sh ~/* 2>/dev/null | sort -hr | head -5; ip addr | grep -E "inet |state"; ping -c 1 8.8.8.8
Recommendation

Avoid sharing raw output publicly and review process/network/disk output for sensitive details before forwarding it.

What this means

If watch mode is invoked, the command will keep running until interrupted.

Why it was flagged

Watch mode is an explicit continuous loop. It is disclosed and user-stoppable, with no evidence of hidden background persistence.

Skill content
echo "Starting monitor (Ctrl+C to stop)..."; while true; do clear; system_status; sleep "$interval"; done
Recommendation

Use watch mode only when you want continuous monitoring and stop it with Ctrl+C when finished.