← Back to Skills Marketplace
Web Monitor
by
rogue-agent1
· GitHub ↗
· v1.0.1
· MIT-0
4760
Downloads
3
Stars
49
Active Installs
2
Versions
Install in OpenClaw
/install web-monitor
Description
Monitor web pages for content changes and get alerts. Track URLs, detect updates, view diffs. Use when asked to watch a website, track changes on a page, mon...
Usage Guidance
Install only if you are comfortable with monitored page contents being saved locally. Use explicit http:// or https:// URLs, avoid authenticated, private, admin, file://, and internal-network targets, and clear ~/.web-monitor or the WEB_MONITOR_DIR location when stored snapshots or alerts may contain sensitive information.
Capability Analysis
Type: OpenClaw Skill
Name: web-monitor
Version: 1.0.1
The `web-monitor` skill is designed to track changes on web pages and provide keyword alerts, but it contains a significant security vulnerability. The `fetch_content` function in `scripts/monitor.py` uses `urllib.request.urlopen` to fetch content without validating the URL scheme, which could allow an attacker to perform local file disclosure (e.g., via `file://` URIs) or Server-Side Request Forgery (SSRF) against internal network resources. While the code logic appears functional and lacks evidence of intentional malice or data exfiltration, this lack of input sanitization is a critical flaw.
Capability Assessment
Purpose & Capability
Monitoring pages, diffs, selectors, and keyword alerts fit the stated purpose, but the implementation passes user-provided URLs directly to urlopen without restricting them to web schemes, which is broader than a web-page monitor needs.
Instruction Scope
The main skill text discloses snapshots and diffs, while README covers keyword alerts and history; however, the keywords-only flag is stored but the check flow still records and reports generic content changes.
Install Mechanism
No deceptive installer or hidden dependency chain is evident; it is a Python script with optional beautifulsoup4 usage, but there is no explicit permission manifest for network and local storage behavior.
Credentials
The tool can fetch arbitrary user-supplied URL targets, including potentially local or internal resources depending on runtime behavior, which is not tightly scoped to public http/https web pages.
Persistence & Privilege
It writes watch configuration, full normalized snapshots, diff files, and keyword alert JSON with context snippets under ~/.web-monitor or WEB_MONITOR_DIR, with no retention limits or sensitive-content warning beyond basic storage disclosure.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install web-monitor - After installation, invoke the skill by name or use
/web-monitor - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Improved documentation in README.md for usage and command examples.
- No user-facing feature or interface changes.
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Web Monitor?
Monitor web pages for content changes and get alerts. Track URLs, detect updates, view diffs. Use when asked to watch a website, track changes on a page, mon... It is an AI Agent Skill for Claude Code / OpenClaw, with 4760 downloads so far.
How do I install Web Monitor?
Run "/install web-monitor" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Web Monitor free?
Yes, Web Monitor is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Web Monitor support?
Web Monitor is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Web Monitor?
It is built and maintained by rogue-agent1 (@rogue-agent1); the current version is v1.0.1.
More Skills