← Back to Skills Marketplace
Shadow AI Monitor
by
TechCodeCrafter
· GitHub ↗
· v1.0.0
511
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install shadow-ai-monitor
Description
Shadow AI Monitor - Enterprise-grade dashboard for tracking employee AI tool usage, data exposure risks, and PIPEDA compliance. Generates professional HTML d...
Usage Guidance
This skill appears to do what it says: generate demo events and produce a local HTML dashboard. Before installing or running it with real data, consider the following: 1) The example cron payload mentions sending WhatsApp notifications, but the skill provides no messaging integration or credentials—do not assume notifications are implemented; adding them will require secure handling of messaging API keys. 2) The generated HTML loads Chart.js from a CDN when opened in a browser; if you need an air-gapped or fully controlled environment, host the library locally or remove the external script. 3) The demo generator creates realistic-seeming events (employee IDs, data categories). If you replace demo data with real telemetry, ensure you have legal basis and employee/client consent before processing or storing personal data. 4) Review the two script files yourself (they are short and readable) before running and run them in an isolated workspace if you are unsure. 5) Source metadata is 'unknown' and author is generic—if you plan to use in production, obtain provenance/maintenance information and confirm licensing. Overall, no signs of data exfiltration or hidden behavior in the provided files, but exercise caution when integrating notification channels or using real-sensitive data.
Capability Analysis
Type: OpenClaw Skill
Name: shadow-ai-monitor
Version: 1.0.0
The OpenClaw skill 'shadow-ai-monitor' is designed to generate local HTML dashboards for AI tool usage and compliance. All scripts (`generate_demo_data.js`, `generate_dashboard.js`) perform local file I/O operations (reading/writing JSON and HTML) and calculations without any network requests, external API calls, or execution of arbitrary commands. The `SKILL.md` instructions for the AI agent are aligned with the skill's stated purpose, instructing it to run the local scripts and send a WhatsApp notification with metrics, which is a legitimate use of agent capabilities. While the generated HTML dashboard loads Chart.js from a CDN, this is a standard web development practice for static pages and not a malicious action performed by the skill's Node.js code itself. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or harmful prompt injection.
Capability Assessment
Purpose & Capability
The name/description promise an enterprise dashboard and compliance analysis; the included files (demo-data generator + HTML dashboard generator) implement exactly that for local/demo usage. One mismatch: the SKILL.md includes an OpenClaw cron example that instructs the agent to "Send WhatsApp notification with metrics," but there is no WhatsApp integration code, no required env vars, and no mention of where to configure messaging credentials. This is a documentation/feature gap rather than evidence of hidden functionality.
Instruction Scope
Runtime instructions are limited to running two local Node scripts and opening the generated HTML; the scripts read/write only local files they create. They do not access system-wide config, secret environment variables, or external APIs from Node. The HTML references Chart.js via a CDN (client-side load). The SKILL.md's automated-schedule example implies sending external notifications (WhatsApp), which is outside the provided code and would require adding credentials and implementation—this is a scope mismatch to be aware of.
Install Mechanism
No install spec is provided (instruction-only install) and the package contains only small Node scripts and a package.json. Nothing is downloaded or executed from external URLs by the Node scripts. The only external resource is a client-side Chart.js CDN reference in the generated HTML; no extract/download installs occur.
Credentials
The skill declares no required environment variables, credentials, or config paths; the bundled code operates on local demo data only. Note: the SKILL.md's delivery example (WhatsApp announcements) would require messaging credentials if implemented — those are not requested by the skill as provided, so any user who wires up automatic notifications must supply and review those credentials separately.
Persistence & Privilege
The skill does not request persistent or elevated privileges. always is false, it is user-invocable, and the code does not modify other skills or system-wide agent settings. It writes output files into the current working directory only (shadow-ai-data.json and shadow-ai-dashboard.html).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install shadow-ai-monitor - After installation, invoke the skill by name or use
/shadow-ai-monitor - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: Enterprise-grade AI tool usage monitoring dashboard with PIPEDA compliance scoring, interactive drill-downs, employee analytics, risk analysis, and PDF export.
Metadata
Frequently Asked Questions
What is Shadow AI Monitor?
Shadow AI Monitor - Enterprise-grade dashboard for tracking employee AI tool usage, data exposure risks, and PIPEDA compliance. Generates professional HTML d... It is an AI Agent Skill for Claude Code / OpenClaw, with 511 downloads so far.
How do I install Shadow AI Monitor?
Run "/install shadow-ai-monitor" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Shadow AI Monitor free?
Yes, Shadow AI Monitor is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Shadow AI Monitor support?
Shadow AI Monitor is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Shadow AI Monitor?
It is built and maintained by TechCodeCrafter (@techcodecrafter); the current version is v1.0.0.
More Skills