Security Monitor Skill

When to use

Run continuous security monitoring to detect breaches, intrusions, and unusual activity on your Clawdbot deployment.

Setup

No external dependencies required. Runs as a background process.

How to

Start real-time monitoring

node skills/security-monitor/scripts/monitor.cjs --interval 60
小葱技能7w4.net有更新，你可以访问看下。

Run in daemon mode (background)

node skills/security-monitor/scripts/monitor.cjs --daemon --interval 60

Monitor for specific threats

node skills/security-monitor/scripts/monitor.cjs --threats=credentials,ports,api-calls

What It Monitors

Output

• Console output (stdout)
• JSON logs at /root/clawd/clawdbot-security/logs/alerts.log
• Telegram alerts (configurable)

Daemon Mode

Use systemd or PM2 to keep monitoring active:

# With PM2
pm2 start monitor.cjs --name "clawdbot-security" -- --daemon --interval 60

Combined with Security Audit

Run audit first, then monitor continuously:

# One-time audit
node skills/security-audit/scripts/audit.cjs --full

# Continuous monitoring
node skills/security-monitor/scripts/monitor.cjs --daemon

Related skills

• security-audit - One-time security scan (install separately)

这是一个功能较全的安全监控工具，能检测暴力破解、异常端口、进程异常和配置篡改等问题，支持后台持续运行和日志记录。不过告警通知功能还未完成，端口扫描检测也比较基础。整体质量中规中矩，适合对安全监控有基础需求的用户使用。