📦 gpu-cluster-monitor — GPU集群监控
v1.0.2实时监控GPU集群健康度与使用率，提供节点状态、性能指标与告警，帮助运维高效调度算力资源。
0· 513·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
high confidenceThe package marketed as a GPU cluster monitor is actually a containerized deep web scraper for YouTube/X that requires Docker and Playwright; the name/description, runtime instructions, and included files are inconsistent and raise privacy/operational risks.
评估建议
Do not install this expecting a GPU cluster monitor — the skill is actually a containerized deep web scraper. Before proceeding: 1) Verify the author's identity and source (homepage is missing). 2) Ask for the Dockerfile and review it; do not build/run the container until you inspect its contents. 3) Run any testing inside an isolated VM or sandbox with no sensitive mounts and restricted network access. 4) Be aware the code intercepts page network requests and performs UI automation; it can capt...详细分析 ▾
⚠ 用途与能力
Name and description claim a GPU cluster monitor, but SKILL.md and the included code implement a 'deep-scraper' (YouTube/X scraping with network interception). A GPU monitoring skill would not need Crawlee/Playwright or instructions for building a Docker scraper. This is a major mismatch.
⚠ 指令范围
The SKILL.md instructs building/running a containerized Playwright/Crawlee scraper that intercepts network requests, clears cookies, and triggers UI interactions to capture hidden APIs/transcripts. That scope goes beyond a resource monitor and includes actions that could capture sensitive network responses or personally identifiable content; the instructions also claim 'penetrate protections' which is concerning.
ℹ 安装机制
There is no formal install spec, but SKILL.md expects building a Docker image (clawd-crawlee). The manifest does not include a Dockerfile despite instructing the user to keep one in the skill directory. package.json declares crawlee/playwright dependencies and an openclaw docker requirement. Missing Dockerfile and mismatch between registry metadata and instructions is an inconsistency the user should verify.
⚠ 凭证需求
The skill requests no environment variables, but requires Docker (privileged capability to run containers) and network access; the scraping code listens to all page network requests and can fetch intercepted URLs. That capability is not justified by the registry name/description and could capture tokens or private API responses if misused.
ℹ 持久化与权限
always is false and the skill doesn't request system-wide config changes. However, it requires the ability to run Docker containers which grants substantial runtime privileges on the host; run-time container privilege should be considered when evaluating risk.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/2/24
- Version bump to 1.0.2 with no functional or documentation changes detected. - No file modifications; the skill remains unchanged.
● 可疑
安装命令
点击复制官方npx clawhub@latest install gpu-cluster-monitor
镜像加速npx clawhub@latest install gpu-cluster-monitor --registry https://cn.longxiaskill.com