安全扫描
OpenClaw
安全
high confidenceThe skill's code and instructions are coherent with a lightweight website-monitoring tool: it only performs HTTP fetches, text-diffing, and stores snapshots on disk, and it does not request unrelated credentials or installs.
评估建议
This skill appears to do exactly what it says: fetch URLs, diff their text, and save snapshots. Before installing, consider: (1) run it in a restricted environment (unprivileged user or container) because it will make outbound HTTP requests to whatever URLs you provide; (2) choose a secure state-dir (not world-readable) since page snapshots may include sensitive content; (3) review and control the list of URLs you monitor to avoid scanning internal services unintentionally; (4) install the 'requ...详细分析 ▾
✓ 用途与能力
The name/description align with the included script and instructions: the tool fetches pages, checks uptime, matches patterns, and keeps file-based state. No unrelated binaries, env vars, or services are requested.
✓ 指令范围
SKILL.md instructs the agent to run the bundled Python script and optionally add cron/heartbeat tasks. The runtime steps only read the provided URL list and state directory and do not ask the agent to read other system files or secrets.
✓ 安装机制
There is no install spec beyond advising pip3 install requests. No downloads from 3rd-party URLs or archive extraction are present; the included Python script is self-contained.
✓ 凭证需求
The skill requests no environment variables or credentials. The only external dependency is the 'requests' library, which is justified for HTTP fetching.
ℹ 持久化与权限
The skill writes snapshot/state files to a state directory (default /tmp/monitor-state). This is normal for a monitor, but those files can contain scraped page content and should be stored with appropriate access controls; the skill does not request persistent platform privileges or always:true.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/5
● 无害
安装命令 点击复制
官方npx clawhub@latest install site-monitor
镜像加速npx clawhub@latest install site-monitor --registry https://cn.clawhub-mirror.com
技能文档
Lightweight website monitoring — detect changes, downtime, or content patterns without external services.
Usage
Check if a site is up
python3 {baseDir}/scripts/monitor.py check https://example.com
Monitor for changes (compare to last snapshot)
python3 {baseDir}/scripts/monitor.py watch https://example.com --state-dir /tmp/monitor-state
Check for specific content
python3 {baseDir}/scripts/monitor.py match https://example.com/pricing --pattern "Enterprise plan"
Batch monitor from file
# sites.txt: one URL per line
python3 {baseDir}/scripts/monitor.py batch sites.txt --state-dir /tmp/monitor-state
Integration with OpenClaw
Heartbeat check
Add to your HEARTBEAT.md:Run website monitor batch check on sites.txt.
If any site is down or changed, notify me.
Cron job
# Check every 30 minutes
openclaw cron add --every 30m --task "Run website monitor on my sites list and alert me if anything changed"
Features
- 🔍 Change detection with text diff
- ⬆️ Uptime checking (HTTP status + response time)
- 🎯 Pattern matching (regex supported)
- 📁 File-based state (no database needed)
- 📋 Batch monitoring from URL list
- 🪶 Zero dependencies beyond Python stdlib + requests
Dependencies
pip3 install requests
How State Works
When using watch mode, the script saves a hash of each page's text content in --state-dir. On the next run, it compares the current hash to the saved one. If different, it reports the change and shows a text diff.
State files are named by URL hash, so you can monitor hundreds of sites without collision.
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制