security-monitor

Original：🇺🇸 English
Translated
1 scripts

Real-time security monitoring for Clawdbot. Detects intrusions, unusual API calls, credential usage patterns, and alerts on breaches.

2installs
Sourceaaaaqwq/agi-super-skills
Added on

NPX Install

npx skill4agent add aaaaqwq/agi-super-skills security-monitor

Tags

Translated version includes tags in frontmatter
security-monitoringclawdbot-securitythreat-detectiondaemon-modesecurity-audit

SKILL.md Content

View Translation Comparison →

Security Monitor Skill

When to use

Run continuous security monitoring to detect breaches, intrusions, and unusual activity on your Clawdbot deployment.

Setup

No external dependencies required. Runs as a background process.

How to

Start real-time monitoring

bash
node skills/security-monitor/scripts/monitor.cjs --interval 60

Run in daemon mode (background)

bash
node skills/security-monitor/scripts/monitor.cjs --daemon --interval 60

Monitor for specific threats

bash
node skills/security-monitor/scripts/monitor.cjs --threats=credentials,ports,api-calls

What It Monitors

ThreatDetectionResponse
Brute force attacksFailed login detectionAlert + IP tracking
Port scanningRapid connection attemptsAlert
Process anomaliesUnexpected processesAlert
File changesUnauthorized modificationsAlert
Container healthDocker issuesAlert

Output

  • Console output (stdout)
  • JSON logs at 
    /root/clawd/clawdbot-security/logs/alerts.log
  • Telegram alerts (configurable)

Daemon Mode

Use systemd or PM2 to keep monitoring active:
bash
# With PM2
pm2 start monitor.cjs --name "clawdbot-security" -- --daemon --interval 60

Combined with Security Audit

Run audit first, then monitor continuously:
bash
# One-time audit
node skills/security-audit/scripts/audit.cjs --full

# Continuous monitoring
node skills/security-monitor/scripts/monitor.cjs --daemon

Related skills

  • security-audit
    - One-time security scan (install separately)