by 安全扫描
OpenClaw
安全
medium confidenceThe skill's code and runtime instructions match its stated purpose (a local web dashboard that reads OpenClaw session state), but it reads local transcripts and serves data on the LAN so review privacy/network exposure before installing.
评估建议
This skill is internally consistent with its stated purpose, but it reads local OpenClaw transcripts and serves session content over the network. Before installing: 1) Review the getTaskDescription logic and decide whether exposing the first user message (even truncated) is acceptable. 2) If you don't want LAN access, change the bind address in server.js from 0.0.0.0 to 127.0.0.1 or run behind an authenticated reverse proxy/firewall. 3) Be aware the service writes logs, PID files and DASHBOARD.m...详细分析 ▾
✓ 用途与能力
Name/description, server.js and helper scripts consistently implement a local dashboard that calls the OpenClaw CLI ('openclaw sessions list --json' and 'openclaw cron list --json') and reads session transcripts to produce summaries. Required binaries/env/credentials are minimal or none, which aligns with a local monitoring tool.
ℹ 指令范围
SKILL.md instructs running npm install and starting the included server which listens on 0.0.0.0:3030 and serves session and transcript-derived content. The code reads transcript files (~/.openclaw/agents/main/sessions/*.jsonl) and returns the first user message (truncated) as task descriptions — this is consistent with monitoring but means user message contents can be exposed via the dashboard (including to LAN).
✓ 安装机制
No install spec is provided; dependency installation is the normal 'npm install' using package.json which only lists express. No remote downloads or extracts; low installation risk.
ℹ 凭证需求
The skill requests no environment variables or credentials, which is appropriate. It does read files under $HOME and ~/.openclaw (transcripts, PID/log files) and writes logs, PID, and DASHBOARD.md — these file accesses are expected for a local monitor but are sensitive (may contain user message content).
✓ 持久化与权限
always:false and no modifications to other skills or system-wide configs. The skill creates its own log and PID files and writes DASHBOARD.md; this is normal for a service and within its scope.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/3
Initial release of Task Monitor: a mobile-responsive, real-time dashboard for monitoring OpenClaw sessions and background tasks. - Web dashboard with modern, gradient dark theme and responsive design - Real-time updates with client-side auto-refresh every 60 seconds - Exposes a fast JSON API endpoint for current status and stats - Intelligent in-memory caching system (30s TTL) for low-latency responses - Supports session, Discord, sub-agent, and cron job monitoring - Legacy Markdown dashboard generator and CRON job automation included
● 无害
安装命令 点击复制
官方npx clawhub@latest install task-monitor
镜像加速npx clawhub@latest install task-monitor --registry https://cn.clawhub-mirror.com
技能文档
Real-time monitoring dashboard for OpenClaw with web interface.
Features
- 🌐 Web Dashboard - Beautiful, responsive UI accessible from any device
- 📱 Mobile-First - Optimized for phones and tablets
- 🔄 Auto-Refresh - Updates every 60 seconds
- 🎨 Modern Design - Gradient UI with dark theme
- 📊 Live Data - Main session, Discord, sub-agents, cron jobs
- 🚀 Fast API - JSON endpoint with intelligent caching (30s TTL)
- ⚡ Performance - <100ms response time (cached), ~15s cold cache
Installation
cd skills/task-monitor
npm install
Usage
Start Web Server
./scripts/start-server.sh
Server will run on port 3030 (accessible on LAN).
Access URLs:
- Local:
http://localhost:3030 - LAN:
http://:3030
Stop Server
./scripts/stop-server.sh
API Endpoint
curl http://localhost:3030/api/status
Returns JSON with:
- Main session stats
- Discord session stats
- Active sub-agents (with descriptions)
- Recent cron job history
Generate Markdown (v0.1)
Legacy markdown generator still available:
./scripts/generate-dashboard.js
Updates DASHBOARD.md in workspace root.
Automation
CRON job runs every 5 minutes to update markdown dashboard:
/5 * -> Executes generate-dashboard.js
Architecture
- Backend: Node.js + Express
- Frontend: Pure HTML/CSS/JS (no frameworks)
- Data Source:
openclaw sessions list --json+openclaw cron list --json - Caching: In-memory cache with 30-second TTL
- Refresh: Client-side polling (60s interval)
Performance
Without cache:
- API response time: ~15 seconds (blocking)
- Problem: Each request blocks Node.js event loop
With cache:
- Cache hit: <100ms (~365x faster)
- Cache miss: ~15s (first request only)
- Stale cache: <100ms while refreshing in background
- Cache TTL: 30 seconds
The caching system ensures:
- Lightning-fast responses for most requests
- No blocking of concurrent requests
- Graceful degradation when cache expires
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制