Gateway Watchdog

Automatically installs and configures Gateway Watchdog to monitor Gateway status, enable DingTalk alerts, set up auto-start, and run the monitoring service.

This skill's code and instructions are coherent with its goal (monitor and auto-restart the OpenClaw Gateway and notify via DingTalk). Before installing: - Inspect the config.py you create and only set the DingTalk WEBHOOK/SECRET if you trust the recipient robot; the code will post status messages to that webhook. - Review the process-killing logic: on Windows the script will call taskkill /IM node.exe (kills all node.exe) and on Linux/macOS uses pkill -f openclaw. If you run other Node.js services on the same host those may be killed; consider modifying the script to target the gateway process more precisely. - The SKILL.md suggests cloning a GitHub repo (adminlove520). Even though the packaged skill already contains the same scripts, cloning or fetching code from external sources is a supply-chain risk—only do this from repositories you trust. - Installing auto-start entries requires elevated privileges (systemd/service or scheduled tasks). Prefer installing under a restricted user account rather than root/admin when possible. - Test the watchdog in a controlled environment (non-production) to confirm restart behavior and side effects before deploying on production hosts. If you want a lower-risk setup: avoid running the installer as root, review and edit kill/start commands to be less broad, or run the monitor in a container or restricted user session so any aggressive process-kill affects only an isolated environment.

Type: OpenClaw Skill Name: openclaw-gateway-watchdog Version: 0.1.0 The skill bundle implements a watchdog service designed to monitor and restart the OpenClaw gateway, featuring high-risk capabilities such as automated persistence (Windows Task Scheduler, macOS LaunchAgents, and systemd) and process termination (using taskkill and pkill). While these actions are aligned with the stated purpose of a watchdog, the broad termination of all 'node.exe' processes on Windows in 'gateway_monitor.py' and the instruction to clone an external repository ('github.com/adminlove520/gateway-watchdog.git') in 'SKILL.md' introduce significant security risks. No explicit evidence of data exfiltration or backdoors was found, but the high-privilege operations and external dependencies warrant a suspicious classification.