Server Health Agent

Monitor VPS and server health metrics including real-time CPU usage, RAM utilization, disk usage, and Docker container status. Useful for DevOps monitoring,...

This skill appears to do what it says: run read-only system commands to return CPU, RAM, disk, and Docker status. Before installing, consider: 1) The agent must have shell access — run the agent with least privilege so the skill only sees what you want it to (avoid running the agent as root if unnecessary). 2) If you do not want container names/status exposed, ensure the agent cannot access the Docker socket/CLI. 3) The SKILL metadata doesn't list required binaries (top, free, df, docker) — check your host has compatible utilities or rely on Node.js fallbacks. 4) Because the code uses child_process.exec, review the code and keep it under source control so you can detect future modifications. If you are comfortable with those points, the skill is internally consistent with its stated purpose.

Type: OpenClaw Skill Name: server-health-agent Version: 1.0.0 The skill is classified as suspicious due to its explicit request for `shell` permission in `SKILL.md` and the use of `child_process.exec` in `skill.js` to run system commands (`top`, `free`, `df`, `docker ps`). While the executed commands are hardcoded, read-only, and do not incorporate user input (thus avoiding direct shell injection vulnerabilities), the broad `shell` permission and the use of a powerful primitive like `exec` represent a significant risky capability, even if plausibly needed for the stated monitoring purpose. This aligns with the guideline to classify broad permissions and risky capabilities as 'suspicious' when clear malicious intent is absent.