process-data-monitor-claw

过程数据监控虾 — 实时监控业务运行中的全链路数据状态，像雷达一样扫描业务流程每个节点，第一时间发现异常并告警。 **当以下情况时使用此 Skill**： (1) 需要监控业务流程节点状态（订单履约、库存同步、支付链路、数据管道等） (2) 需要设置数据异常阈值告警（数值超限、状态卡顿、趋势恶化） (3) 需要配...

This skill appears to be a legitimate monitoring/alerting helper, but there are mismatches you should address before installing or running it: (1) Required binaries: the scripts call curl and jq (and imply cron); ensure those are available. (2) Missing declared env vars: the metadata lists none but the code/docs use FEISHU_WEBHOOK, FEISHU_BOT_TOKEN and many example credentials (DB passwords, cloud keys). Treat those as sensitive — do not supply high-privilege credentials. (3) Review config/monitor-config.yaml before starting the daemon; the monitor will execute queries and call external endpoints defined there. (4) Limit network exposure: verify any webhook URLs and bot tokens point to trusted receivers to avoid accidental data exfiltration. (5) Run first in an isolated/test environment with read-only monitoring accounts and least privilege, and inspect logs (in /tmp) and code. If the publisher/source is unknown, ask for provenance (source repo, homepage, or signed release) or request the skill declare required env vars and binaries explicitly before use.

Type: OpenClaw Skill Name: process-data-monitor-claw Version: 1.0.0 The bundle provides a framework for business process monitoring with background daemon capabilities and multi-channel alerting via Feishu (Lark). It is classified as suspicious because it establishes a high-risk execution environment that handles sensitive credentials (database passwords, API tokens) and performs arbitrary SQL queries or network requests based on AI-interpreted configurations. The reliance on the agent to implement core logic in scripts/alert-sender.sh and the use of background processes in scripts/monitor-daemon.sh create a significant attack surface for data exfiltration or unauthorized system access if the agent's instructions are subverted via prompt injection.