Monitoring

Set up observability for applications and infrastructure with metrics, logs, traces, and alerts.

Safe to install as a guide, but do not copy the examples directly into production without hardening them. Pin package versions when needed, protect Grafana and alerting secrets, restrict monitoring ports to trusted networks, and redact or minimize PII, tokens, headers, request bodies, stack traces, and logs sent to monitoring vendors.

Type: OpenClaw Skill Name: monitoring Version: 1.0.0 The OpenClaw AgentSkills skill bundle for 'monitoring' is benign. It provides comprehensive documentation and setup instructions for legitimate observability tools (e.g., Prometheus, Grafana, Loki, Sentry, Uptime Kuma). While it includes commands to fetch and execute remote code (e.g., `npm install`, `npx`, `docker run`) and configure services that handle sensitive data (e.g., DSNs, API keys, passwords), these are standard practices for deploying and configuring monitoring software. There is no evidence of prompt injection, data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or obfuscation beyond the legitimate scope of setting up an observability stack.