The skill's description claims many integrations and privileged actions (AWS restarts, SSH execution, Google Sheets, SMS, Jira/GitHub), but the runtime instructions and required environment/binary list do not justify or cover those capabilities — this mismatch is concerning and needs clarification before use.
评估建议
This skill advertises many external integrations and actions (cloud restarts, SSH commands, Google Sheets, SMS, issue creation), but its declared requirements only include curl, jq and three API keys — several needed credentials and binaries are missing from the metadata. Before installing: (1) Ask the publisher to explain which integrations are actually implemented and to update requires.env and required binaries to list all needed credentials/tools (e.g., AWS keys or aws CLI, Google service ac...
详细分析 ▾
⚠用途与能力
The README-style SKILL.md advertises wide-ranging integrations and privileged actions (AWS/Azure auto-restarts, executing shell commands via SSH, Google Sheets, WordPress monitoring, SMS notifications, creating Jira/GitHub issues). The declared requirements only list curl, jq and three env vars (SLACK_WEBHOOK_URL, PAGERDUTY_API_KEY, DATADOG_API_KEY). Required credentials and tools for AWS (aws CLI or AWS_ACCESS_KEY_ID/AWS_SECRET), Google APIs (OAuth client or service account), SSH private keys, Twilio/SMS credentials, WordPress admin credentials, or Jira/GitHub tokens are not declared — this is an incoherence between claimed purpose and requested capabilities.
⚠指令范围
SKILL.md contains operational instructions and examples that include POSTing to arbitrary restart webhooks, executing remote commands over SSH, triggering cloud actions, and writing to Google Sheets. Because this is an instruction-only skill with no code files, those instructions are what the agent will follow. They are broad and can cause side effects (remote restarts, posting to external endpoints). The document is vague about authentication and safe defaults, giving the agent significant latitude to call arbitrary endpoints and perform privileged actions — scope creep and potential for misuse.
✓安装机制
No install spec and no code files — lowest install risk. Nothing is downloaded or written to disk by an installer as part of the skill bundle.
⚠凭证需求
Only three environment variables are required (Slack webhook, PagerDuty API key, Datadog API key), which make sense for some alerting features. However, the skill claims integrations that normally require additional credentials (AWS/Azure keys, Google service account, SSH keys, Twilio API creds, Jira/GitHub tokens). Those are not declared, so either the skill will not actually implement those integrations, or it will attempt to use other undeclared credentials or prompt for them at runtime. The declared env vars are thus insufficient for the advertised scope.
✓持久化与权限
The skill is not marked always:true and does not request any system config paths. Autonomous invocation is allowed by platform default; that is expected. No evidence the skill attempts to modify other skills or agent-wide config.
安全有层次，运行前请审查代码。
运行时依赖
🖥️ OSmacOS · Linux · Windows
版本
latestv1.0.02026/3/15
Initial release of Multi-Site Health Monitor, a production-grade uptime and incident monitoring skill.
- Monitor 10–100+ websites/services with flexible health checks (HTTP(s), TCP, DNS, SSL/TLS, Ping/ICMP).
- Intelligent alert routing to Slack, PagerDuty, Datadog, Google Sheets, and more with configurable thresholds and escalation rules.
- Automatic incident response: webhook triggers, auto-restart, AWS integration, and ticket creation for detected failures.
- Performance tracking: uptime calculations, error rates, historical reports, Datadog integration, compliance & audit logging.
- WordPress-specific monitoring: plugin/theme vulnerability checks, update/status alerts, backup and user activity verification.
- Requires environment setup for Slack, PagerDuty, Datadog (and optionally AWS, SSH, Google Sheets).
by @ncreighton