Monitors OpenClaw health with real-time status, one-click fixes, security scans, and a web dashboard supporting Chinese and English.

Plain-language checklist before installing or running this skill: - Understand what it will do: the package contains runnable agents and a web server that will read OpenClaw logs/configs (~/.openclaw, /tmp/openclaw), stop/kill processes, restart the gateway, edit config files, and delete large logs. Those are powerful, potentially disruptive actions. - Inspect install.sh and server.py locally (do not run them) to see exactly what will be executed. If you are not comfortable reading shell/Python scripts, ask a technical colleague to review them. - Don’t run it as root. Test inside an isolated environment (VM, container, or disposable machine) first so any destructive actions are contained. - Backup OpenClaw config and logs (e.g., copy ~/.openclaw) before allowing fixes to run, so you can restore if something changes unexpectedly. - Check network behavior: the code includes a cloud API endpoint (https://api.clawdoctor.io) and a placeholder for api_key. Unless you trust the upstream service and author, avoid setting API keys or enabling cloud reporting. Monitor outbound network connections while running the tool. - Verify upstream source: SKILL.md references a GitHub repo (github.com/olveww-dot/clawdoctor). Confirm the repo, its commit history, and that the package you install matches that repository. Contact the author for clarification about the cloud endpoint and the unicode-control-chars finding. - If you only want monitoring (no changes), run the read-only scripts (e.g., the _simple agent) in read-only mode and avoid invoking any 'fix' or 'start' actions from the dashboard. If you cannot perform these checks or do not trust the origin, treat the skill as untrusted and avoid installing it on production systems.

Type: OpenClaw Skill Name: clawdoctor-openclaw Version: 1.0.1 ClawDoctor is an OpenClaw maintenance utility that provides system monitoring, service auto-repair, and a web-based dashboard. It is classified as suspicious because it performs several high-risk operations: it modifies shell configuration files (~/.bashrc and ~/.zshrc) to establish persistence for its CLI, runs a local HTTP server (server_simple.py), and requires broad permissions to terminate processes and read system logs. Additionally, agent.py contains inactive telemetry logic designed to exfiltrate system health reports to a remote endpoint (api.clawdoctor.io), and clawdoctor.py includes a 'SecurityScanner' that aggressively flags other installed skills for using common programming patterns.