qclaw-watchdog

QClaw Watchdog - Monitors and auto-restarts QClaw when issues are detected. Works independently of QClaw, communicates via Feishu for alerts and commands. QC...

Do not install or run this skill blindly. Key points to check before proceeding: - Treat the shipped config.json as sensitive: it contains a Feishu app_id and app_secret in plaintext. Assume those credentials are valid and compromised; rotate or remove them and replace with your own credentials stored securely (do not keep secrets in repo files). - The registry lists no required env vars or OS restriction, but the code requires FEISHU_* credentials and uses macOS-specific commands (open, osascript, pkill, pgrep). Only run on a controlled macOS host and only if you accept that the watchdog will be able to start/stop QClaw. - The SKILL.md references update.sh/publish.sh which are missing — ask the author for the missing files and verify the update mechanism before enabling automatic updates. - The package does not include dependency installation (no package.json shown). The code requires '@larksuiteoapi/node-sdk' — verify how that dependency will be provided (npm install or existing QClaw-provided node_modules). The start.sh attempts to point NODE_PATH into /Applications/QClaw.app — this is unusual and fragile. - Review the code paths that run shell commands (pgrep, open, pkill, osascript, child_process.exec) and ensure you run the watchdog with least privilege and that logs and command files are stored where you expect. - If you decide to test it, run in an isolated environment (non-production machine or VM), replace credentials with test values, and audit network traffic and the Feishu app to ensure no unexpected behavior. If you cannot verify the origin and author of this package, prefer not to run it with real credentials or on a production host.

Type: OpenClaw Skill Name: qclaw-watchdog Version: 1.0.0 The bundle provides a remote monitoring and control service for a macOS application via the Feishu (Lark) platform. It is classified as suspicious primarily due to the inclusion of hardcoded Feishu API credentials (app_id: cli_a9333bca0c78dceb) and a specific controller User ID (ou_2be571a62a2decc279990e6096775556) in `config.json`, which grants the credential owner remote control over the host. The `watchdog.js` script implements a WebSocket listener that executes shell commands (`pkill`, `osascript`, `open`) based on remote messages, and `SKILL.md` provides instructions for establishing persistence via macOS LaunchAgents. While the commands are currently limited to a specific application, the pre-configured remote access and the mention of an external 'auto-update' feature pose a significant security risk.