← 返回 Skills 市场
Security Monitor
作者
chandrasekar-r
· GitHub ↗
· v1.0.0
8493
总下载
6
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install security-monitor
功能描述
Real-time security monitoring for Clawdbot. Detects intrusions, unusual API calls, credential usage patterns, and alerts on breaches.
安全使用建议
Review before installing. Run only under a tightly scoped account, avoid granting access to unrelated credential files, do not rely on --threats to limit what it checks, and avoid daemon mode until interval parsing and resource controls are fixed. Treat its logs and state files as sensitive security data.
功能分析
Type: OpenClaw Skill
Name: security-monitor
Version: 1.0.0
The skill is classified as suspicious due to its use of high-risk capabilities, specifically reading sensitive files and executing system commands, even though these actions are ostensibly for security monitoring. The `scripts/monitor.cjs` file reads potentially sensitive `.env` files from `/root/clawd/` and executes commands like `tail`, `ss`, `ps aux`, and `docker ps` via `child_process.execSync`. While the script does not currently exfiltrate the *content* of credentials (only logging the *presence* of API keys), and a `TODO` comment for Telegram alerts is not implemented, the broad access to system information and sensitive files, combined with the ability to execute arbitrary commands, presents a significant risk if the code were to be modified or if the agent were compromised.
能力评估
Credentials
The monitor uses privileged-looking /root paths, reads system auth logs, enumerates ports and processes, queries Docker, writes local logs/state, and reads credential-file contents; most of this is expected for host security monitoring, but the raw .env read and ignored scoping make the authority under-contained.
Install Mechanism
No package installation, remote code retrieval, or automatic install-time execution was found; the user is instructed to run the bundled Node.js script directly, with optional PM2/systemd-style supervision.
Instruction Scope
The skill documents --threats for specific threat monitoring, but the script always runs all checks, so users cannot actually limit access to only the selected monitoring categories.
Persistence & Privilege
Daemon and PM2 background operation is disclosed, and local alert/state persistence is expected, but broken interval parsing can turn documented interval usage into a near-continuous loop that repeatedly runs shell commands and writes state/log data.
Purpose & Capability
Monitoring auth logs, ports, processes, Docker, and selected Clawdbot files fits a security-monitoring purpose, but reading the full contents of /root/clawd/skills/.env just to detect service names is broader than necessary and not clearly disclosed.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install security-monitor - 安装完成后，直接呼叫该 Skill 的名称或使用
/security-monitor触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: brute force detection, port anomaly monitoring, process monitoring, file change detection, Docker health checks
元数据
常见问题
Security Monitor 是什么？
Real-time security monitoring for Clawdbot. Detects intrusions, unusual API calls, credential usage patterns, and alerts on breaches. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 8493 次。
如何安装 Security Monitor？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install security-monitor」即可一键安装，无需额外配置。
Security Monitor 是免费的吗？
是的，Security Monitor 完全免费（开源免费），可自由下载、安装和使用。
Security Monitor 支持哪些平台？
Security Monitor 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Security Monitor？
由 chandrasekar-r（@chandrasekar-r）开发并维护，当前版本 v1.0.0。
推荐 Skills