← Back to Skills Marketplace
Security Monitor
by
chandrasekar-r
· GitHub ↗
· v1.0.0
8493
Downloads
6
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install security-monitor
Description
Real-time security monitoring for Clawdbot. Detects intrusions, unusual API calls, credential usage patterns, and alerts on breaches.
Usage Guidance
Review before installing. Run only under a tightly scoped account, avoid granting access to unrelated credential files, do not rely on --threats to limit what it checks, and avoid daemon mode until interval parsing and resource controls are fixed. Treat its logs and state files as sensitive security data.
Capability Analysis
Type: OpenClaw Skill
Name: security-monitor
Version: 1.0.0
The skill is classified as suspicious due to its use of high-risk capabilities, specifically reading sensitive files and executing system commands, even though these actions are ostensibly for security monitoring. The `scripts/monitor.cjs` file reads potentially sensitive `.env` files from `/root/clawd/` and executes commands like `tail`, `ss`, `ps aux`, and `docker ps` via `child_process.execSync`. While the script does not currently exfiltrate the *content* of credentials (only logging the *presence* of API keys), and a `TODO` comment for Telegram alerts is not implemented, the broad access to system information and sensitive files, combined with the ability to execute arbitrary commands, presents a significant risk if the code were to be modified or if the agent were compromised.
Capability Assessment
Credentials
The monitor uses privileged-looking /root paths, reads system auth logs, enumerates ports and processes, queries Docker, writes local logs/state, and reads credential-file contents; most of this is expected for host security monitoring, but the raw .env read and ignored scoping make the authority under-contained.
Install Mechanism
No package installation, remote code retrieval, or automatic install-time execution was found; the user is instructed to run the bundled Node.js script directly, with optional PM2/systemd-style supervision.
Instruction Scope
The skill documents --threats for specific threat monitoring, but the script always runs all checks, so users cannot actually limit access to only the selected monitoring categories.
Persistence & Privilege
Daemon and PM2 background operation is disclosed, and local alert/state persistence is expected, but broken interval parsing can turn documented interval usage into a near-continuous loop that repeatedly runs shell commands and writes state/log data.
Purpose & Capability
Monitoring auth logs, ports, processes, Docker, and selected Clawdbot files fits a security-monitoring purpose, but reading the full contents of /root/clawd/skills/.env just to detect service names is broader than necessary and not clearly disclosed.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install security-monitor - After installation, invoke the skill by name or use
/security-monitor - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: brute force detection, port anomaly monitoring, process monitoring, file change detection, Docker health checks
Metadata
Frequently Asked Questions
What is Security Monitor?
Real-time security monitoring for Clawdbot. Detects intrusions, unusual API calls, credential usage patterns, and alerts on breaches. It is an AI Agent Skill for Claude Code / OpenClaw, with 8493 downloads so far.
How do I install Security Monitor?
Run "/install security-monitor" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Security Monitor free?
Yes, Security Monitor is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Security Monitor support?
Security Monitor is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Security Monitor?
It is built and maintained by chandrasekar-r (@chandrasekar-r); the current version is v1.0.0.
More Skills