Task Monitor

Real-time web dashboard for OpenClaw sessions and background tasks. Mobile-responsive with auto-refresh.

This skill is internally consistent with its stated purpose, but it reads local OpenClaw transcripts and serves session content over the network. Before installing: 1) Review the getTaskDescription logic and decide whether exposing the first user message (even truncated) is acceptable. 2) If you don't want LAN access, change the bind address in server.js from 0.0.0.0 to 127.0.0.1 or run behind an authenticated reverse proxy/firewall. 3) Be aware the service writes logs, PID files and DASHBOARD.md into your HOME/workspace — check those locations for sensitive content and adjust paths or permissions as needed. 4) Note minor inconsistencies: generate-dashboard.js writes to $HOME/clawd/DASHBOARD.md while update-dashboard.js expects different paths/inputs; test the scripts you plan to use. 5) Run the server in an isolated account/container if you want to limit any accidental data exposure.

Type: OpenClaw Skill Name: task-monitor Version: 1.0.0 The OpenClaw Task Monitor skill is classified as benign. Its primary function is to provide a web-based dashboard and markdown reports for OpenClaw sessions and cron jobs. All observed behaviors, such as executing `openclaw` CLI commands (`openclaw sessions list`, `openclaw cron list`), reading OpenClaw's internal session transcript files (`~/.openclaw/agents/main/sessions/*.jsonl`), running a local Express web server on port 3030 (accessible on LAN as documented), and writing a dashboard markdown file, are directly aligned with its stated purpose. There is no evidence of data exfiltration, malicious execution, persistence mechanisms beyond its own service, prompt injection attempts against the agent, or obfuscation.