← 返回 Skills 市场
mariusfit

Clawhub Skill Infra Watchdog

作者 mariusfit · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
498
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install clawhub-skill-infra-watchdog
功能描述
Self-hosted infrastructure monitoring with local checks for HTTP, TCP, Docker, resources, SSL, DNS, Proxmox, and alerts via WhatsApp, Telegram, or Discord.
使用说明 (SKILL.md)

Infra Watchdog — Infrastructure Monitoring & Health Alerts

Self-hosted infrastructure monitoring for OpenClaw agents. Zero external SaaS required — monitors everything locally and alerts via WhatsApp, Telegram, or Discord.

What It Does

  • HTTP/HTTPS endpoint monitoring — checks status codes, response time, SSL validity
  • TCP port checks — database, SSH, custom services
  • Docker container status — running, stopped, unhealthy
  • System resources — CPU, RAM, disk usage with configurable thresholds
  • SSL certificate expiry — alerts 30 days before expiry
  • DNS resolution checks — verifies domain → IP mappings
  • Proxmox VM/CT status — checks via local API
  • Alerts via WhatsApp/Telegram/Discord — with configurable cooldown

Quick Start

# Initialize data directory & config
infra-watchdog init

# Add your first monitor
infra-watchdog add-monitor --type http --name "My API" --url https://myapi.example.com

# Add a TCP port check
infra-watchdog add-monitor --type tcp --name "PostgreSQL" --host localhost --port 5432

# Add a Docker container check
infra-watchdog add-monitor --type docker --name "My App" --container myapp

# Run all checks now
infra-watchdog check

# View current status dashboard
infra-watchdog dashboard

# Install auto-check cron (every 5 min)
infra-watchdog cron-install

Commands

Command Description
infra-watchdog init Set up data directory and default config
infra-watchdog add-monitor Add a new monitor (http/tcp/docker/resource/ssl/dns)
infra-watchdog list List all configured monitors and their current state
infra-watchdog check Run all checks immediately
infra-watchdog check --name \x3Cname> Run a specific monitor
infra-watchdog status Summary: UP/DOWN/WARN counts
infra-watchdog dashboard ASCII dashboard with all monitors
infra-watchdog cron-install Install auto-check cron job

Monitor Types

HTTP/HTTPS

infra-watchdog add-monitor \
  --type http \
  --name "Main API" \
  --url https://api.example.com/health \
  --expected-status 200 \
  --timeout 5

TCP Port

infra-watchdog add-monitor \
  --type tcp \
  --name "Postgres" \
  --host 192.168.1.10 \
  --port 5432

Docker Container

infra-watchdog add-monitor \
  --type docker \
  --name "Nginx" \
  --container nginx-proxy

System Resources

infra-watchdog add-monitor \
  --type resource \
  --name "Disk /" \
  --resource disk \
  --path / \
  --warn-at 80 \
  --alert-at 90

SSL Certificate

infra-watchdog add-monitor \
  --type ssl \
  --name "My Domain SSL" \
  --host example.com \
  --port 443 \
  --warn-days 30

Configuration

Edit ~/.openclaw/workspace/infra-watchdog-data/config.json:

{
  "alert_channel": "whatsapp",
  "alert_cooldown_minutes": 15,
  "check_interval_minutes": 5,
  "ssl_expiry_warning_days": 30
}

Alert Channels

Channel Config value
WhatsApp "whatsapp"
Telegram "telegram"
Discord "discord"
None (log only) "none"

Use Cases

Homelab Monitoring

Track all your self-hosted services: Proxmox, Docker stacks, databases, Jellyfin, Home Assistant, etc. Get a WhatsApp alert the moment anything goes down.

API Uptime Monitoring

If you sell API services on RapidAPI, this skill monitors your endpoints 24/7 and pings you before customers notice an outage.

SSL Expiry Prevention

Never let a certificate expire again. Get a WhatsApp warning 30 days before expiry.

Resource Alerts

Disk full at 3am? Get alerted before it kills your services.

Data Storage

All data stored locally at ~/.openclaw/workspace/infra-watchdog-data/. SQLite database, no cloud sync, no telemetry.

Requirements

  • Python 3.8+
  • Docker (optional, for container monitoring)
  • OpenClaw 1.0+

Source & Issues

安全使用建议
This package appears to implement a local monitoring tool but has several gaps you should clarify before installing: (1) Where/how are WhatsApp/Telegram/Discord credentials or webhooks configured? Verify the code path used to send alerts and confirm you control any external endpoints. (2) SKILL.md expects an 'infra-watchdog' CLI, but there is no install/packaging step — decide how you'll install the Python script (virtualenv, symlink, packaging). (3) The HTTP check disables SSL verification — review whether SSL expiry checks are implemented separately and whether disabling verification is acceptable for your use. (4) Inspect the complete watchdog.py (including truncated parts) to confirm alert-sending code, any network endpoints contacted, and any file writes outside the documented data directory. (5) If you intend to run cron-install, test in a safe environment first. If you cannot review the full code, run the tool in an isolated VM or container and monitor outbound connections and file access before trusting it with production systems.
功能分析
Type: OpenClaw Skill Name: clawhub-skill-infra-watchdog Version: 1.0.0 The `watchdog.py` script contains command injection vulnerabilities. User-provided `target` values for `docker` and `disk` monitor types are directly passed as arguments to `subprocess.run` (e.g., `['docker', 'inspect', container_id]`, `['df', '-h', mount_point]`). A malicious user could craft these inputs to execute arbitrary commands on the host system (RCE risk). Additionally, the `check_http` function uses `ssl.create_default_context()` with `check_hostname=False` and `verify_mode=ssl.CERT_NONE`, which weakens SSL verification and introduces a Man-in-the-Middle (MITM) vulnerability. While these are serious flaws, there is no clear evidence of intentional malicious behavior by the skill's developer, such as data exfiltration or backdoor installation; the risky capabilities are plausibly related to the stated monitoring purpose.
能力评估
Purpose & Capability
The name/description and included code implement a local infrastructure monitor (HTTP, TCP, Docker, disk, memory, SSL, DNS, Proxmox) which is coherent with the stated purpose. However SKILL.md claims alerts via WhatsApp/Telegram/Discord but neither the manifest nor SKILL.md declare or describe how credentials/tokens/webhooks for those services are provided, which is an unexplained omission.
Instruction Scope
SKILL.md instructs use of an 'infra-watchdog' CLI (init, add-monitor, cron-install, etc.) but the package provides only a single watchdog.py and no install/packaging instructions to make a CLI available on PATH; that mismatch means the runtime instructions are incomplete. The instructions also point at a local config path (~/.openclaw/workspace/infra-watchdog-data/config.json) which the code uses — that part is consistent. Finally, the HTTP checker in code disables SSL verification (ssl.CERT_NONE), which is unexpected given the skill advertises SSL validity checks.
Install Mechanism
No install spec is provided (instruction-only + included Python script). This minimizes remote install risk but is also inconsistent with SKILL.md which expects a ready CLI. The code will be written to the agent bundle and can be executed locally; there is no external download URL or archive to review.
Credentials
The skill declares no required environment variables or primary credential, but its advertised alert channels (WhatsApp/Telegram/Discord) normally require API keys, phone numbers, webhooks, or third‑party services. The code/config shown does not explain where those credentials live or how they are secured. This mismatch could lead to unclear runtime behavior (attempts to reach external endpoints, prompting the user for secrets, or storing tokens locally without guidance).
Persistence & Privilege
always is false and the skill does not request elevated platform privileges. The 'cron-install' command (documented) would create a periodic job if run, which is expected for a monitor but requires user consent. No indication that the skill modifies other skills or system-wide agent configurations.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clawhub-skill-infra-watchdog
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clawhub-skill-infra-watchdog 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of Infra Watchdog 1.0.0: - Self-hosted monitoring for HTTP(S), TCP ports, Docker containers, system resources, SSL expiry, DNS, and Proxmox VMs/CTs - Local alerts via WhatsApp, Telegram, or Discord; no external SaaS required - CLI for adding monitors, running checks, viewing dashboards, and status summaries - Configurable alert cooldowns and thresholds - All data stored locally with no telemetry or cloud sync
元数据
Slug clawhub-skill-infra-watchdog
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Clawhub Skill Infra Watchdog 是什么?

Self-hosted infrastructure monitoring with local checks for HTTP, TCP, Docker, resources, SSL, DNS, Proxmox, and alerts via WhatsApp, Telegram, or Discord. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 498 次。

如何安装 Clawhub Skill Infra Watchdog?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawhub-skill-infra-watchdog」即可一键安装,无需额外配置。

Clawhub Skill Infra Watchdog 是免费的吗?

是的,Clawhub Skill Infra Watchdog 完全免费(开源免费),可自由下载、安装和使用。

Clawhub Skill Infra Watchdog 支持哪些平台?

Clawhub Skill Infra Watchdog 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Clawhub Skill Infra Watchdog?

由 mariusfit(@mariusfit)开发并维护,当前版本 v1.0.0。

💬 留言讨论