Network Monitor

Comfortably monitor your Internet traffic 🕵️‍♂️ Based on GyulyVGC/sniffnet (32,966+ GitHub stars). network monitor, rust, application, gui, iced, linux, macos

This skill is a small Bash CLI network monitor that generally does what it says, but there are a few red flags you should consider before installing: (1) The README and metadata overstate ties to a Rust GUI project and claim runtime: python3 while the shipped script is Bash — a sign the package was assembled hastily or copy-pasted. (2) A static scan found unicode control characters in SKILL.md — inspect the file for hidden characters or manipulation. (3) The speed test downloads a 1MB file from an external URL (speedtest.tele2.net) — if you dislike external network traffic change/remove that command. (4) The script reads MAC addresses and interface stats from /sys and /proc (expected for network tools) — if you need to protect local hardware identifiers don't run it unsecured. Recommended actions: inspect scripts locally, run in a sandbox/VM first, remove or replace the external speed-test URL if unwanted, and verify licensing/attribution claims (header/license mismatches). If you need stronger assurance, request a provenance or source repository from the publisher before using.

Type: OpenClaw Skill Name: network-monitor Version: 1.0.0 The skill provides standard network monitoring utilities but contains a command injection vulnerability in `scripts/network_monitor.sh`. Specifically, the `dns` command interpolates the user-supplied `$domain` variable directly into a Python script string (`python3 -c "... domain = '$domain' ..."`), which could allow for arbitrary code execution if a crafted domain name is provided. While the tool's features (bandwidth monitoring, latency tests, and speed tests via `speedtest.tele2.net`) are consistent with its description, the lack of input sanitization poses a security risk.