Network Device Monitor

Monitor network devices, detect unknown clients, and alert on new connections. Works with any router that serves a web UI. Tracks device state changes over t...

This skill appears coherent and performs only local network scans and local state storage. Before installing or running: 1) Ensure you have nmap or arp-scan installed (arp-scan requires root and the script currently calls arp-scan with --localnet, ignoring the supplied subnet — be aware of this bug). 2) The script writes ~/<hidden>/.network-state.json by default; review or override the --state path if you prefer a different location. 3) Network scans may trigger IDS/IPS on some networks and arp-scan requires elevated privileges — run in a safe/test environment if unsure. 4) The code uses subprocess to invoke system tools; inspect the script yourself if you have security concerns. No external network calls or credential exfiltration were found.

Type: OpenClaw Skill Name: network-device-monitor Version: 1.0.0 The skill provides legitimate network monitoring functionality but contains a potential argument injection vulnerability in `scripts/scan-network.py`, where the `--subnet` parameter is passed directly to `nmap` via `subprocess.run`. An attacker could potentially inject additional `nmap` flags (e.g., `--script`) if they can influence the subnet input. Additionally, the `--state` parameter allows the agent to write JSON data to arbitrary file paths, which could lead to file corruption or configuration overwrites if misused.