← Back to Skills Marketplace
johnnywang2001

SSL Certificate Monitor

by John Wang · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ Security Clean
264
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install jrv-ssl-monitor
Description
Check SSL/TLS certificate expiry, issuer, protocol, and SANs for one or more domains. Use when asked to check SSL certificates, monitor cert expiry, verify H...
README (SKILL.md)

SSL Certificate Monitor

Check SSL certificate health for any domain — expiry, issuer, protocol version, and Subject Alternative Names.

Quick Start

python3 scripts/check_ssl.py example.com
python3 scripts/check_ssl.py example.com google.com github.com --warn-days 30
python3 scripts/check_ssl.py internal.host --port 8443 --json

Features

  • Expiry check — days remaining with configurable warning threshold
  • Multi-domain — check multiple domains in one command
  • Certificate details — subject, issuer, protocol, serial number, SANs
  • Error handling — detects DNS failures, timeouts, verification errors, refused connections
  • Exit codes — 0 = all ok, 1 = warnings, 2 = expired or failed (useful for cron/CI)
  • No dependencies — Python stdlib only

Options

Flag Description
--warn-days N Warning threshold in days (default: 14)
--port PORT Port to check (default: 443)
--json Output structured JSON
--timeout N Connection timeout in seconds (default: 10)

Use Cases

  • Daily cron job to monitor production domains
  • Pre-deployment cert validation
  • Audit all company domains in one pass
  • CI/CD pipeline gate for cert health
Usage Guidance
This skill appears to be what it claims: a local CLI that connects to whatever domains you give it and reports certificate details. Before installing/using: (1) inspect or run the script locally (it is included) to verify behavior; (2) be aware it will make outbound TCP connections to the domains you supply (do not scan targets you are not authorized to probe); (3) if you plan cron/CI use, ensure Python 3 is available and consider network/rate limits and handling private CA/trust stores; (4) no credentials are requested and there is no external exfiltration in the code.
Capability Analysis
Type: OpenClaw Skill Name: jrv-ssl-monitor Version: 1.0.0 The skill is a legitimate utility for monitoring SSL/TLS certificate health, including expiry dates and issuer details. The implementation in `scripts/check_ssl.py` uses only the Python standard library (ssl/socket modules), contains no suspicious external network calls, and lacks any indicators of data exfiltration or command injection.
Capability Assessment
Purpose & Capability
The name/description describe SSL certificate checks and the included Python script implements exactly that (expiry, issuer, SANs, protocol). No unrelated binaries, env vars, or services are requested.
Instruction Scope
SKILL.md directs the agent to run the bundled script with domain arguments and options; the script only performs TCP/SSL connections to the target hosts, parses certificate fields, and prints/outputs JSON. It does not read unrelated files or send data to any external endpoint.
Install Mechanism
No install spec (instruction-only plus a bundled script). Nothing is downloaded or extracted from third-party URLs; the script relies only on Python stdlib as claimed.
Credentials
No environment variables, credentials, or config paths are required. The script only makes outbound connections to the domains you supply — this is proportional to the stated purpose.
Persistence & Privilege
The skill does not request persistent/always-on privileges or modify other skills or system settings. Model invocation is allowed (platform default) but the skill's actions are limited and self-contained.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install jrv-ssl-monitor
  3. After installation, invoke the skill by name or use /jrv-ssl-monitor
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: multi-domain check, expiry alerts, TLS version, SAN listing, JSON output
Metadata
Slug jrv-ssl-monitor
Version 1.0.0
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is SSL Certificate Monitor?

Check SSL/TLS certificate expiry, issuer, protocol, and SANs for one or more domains. Use when asked to check SSL certificates, monitor cert expiry, verify H... It is an AI Agent Skill for Claude Code / OpenClaw, with 264 downloads so far.

How do I install SSL Certificate Monitor?

Run "/install jrv-ssl-monitor" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is SSL Certificate Monitor free?

Yes, SSL Certificate Monitor is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does SSL Certificate Monitor support?

SSL Certificate Monitor is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created SSL Certificate Monitor?

It is built and maintained by John Wang (@johnnywang2001); the current version is v1.0.0.

💬 Comments