Documents

OpenClaw Ecosystem Monitor

Try it

Monitor public OpenClaw ecosystem sources with source-quality checks, metadata-only collection, and trust-first reporting.

What it does

Monitor public OpenClaw ecosystem sources with source-quality checks, metadata-only collection, and trust-first reporting.

The skill document

OpenClaw Ecosystem Monitor

This skill collects metadata-only signals from public OpenClaw ecosystem sources and reports freshness, dependency, and trust signals with canonical source links.

Use Cases

  • Track OpenClaw-related npm package freshness.
  • Track public GitHub repository metadata and small contribution candidates.
  • Track OpenClaw docs and ClawHub availability/freshness.
  • Produce source-linked summaries without copying full issue bodies, README files, docs pages, or package tarballs.

Data Discipline

Before collecting any source, read sources/source_quality.yaml.

Hard rules:

  • Use official APIs when available.
  • Store only normalized metadata, short summaries, hashes, timestamps, and canonical source URLs.
  • Do not store secrets, cookies, access tokens, account IDs, or private user data.
  • Do not bulk mirror package tarballs, docs pages, README files, or issue bodies.
  • Stop on 403, 429, robots disallow, DMCA/abuse signal, or platform warning.

Run

From this skill directory:

node scripts/collect-openclaw-ecosystem.mjs
node scripts/render-demo-report.mjs

The collector writes a local JSON snapshot under data/YYYY-MM-DD/. The renderer writes a Markdown report under reports/.

Local Runtime

The OpenClaw computer can run this skill without an agent/model turn through:

  • ops/run-openclaw-ecosystem-monitor.sh

That wrapper only runs the local scripts. It does not post messages, publish reports, call models, or use secrets.

Trust Requirements

This skill includes the trust and distribution-review docs:

  • trust/permission-manifest.md
  • trust/no-secret-policy.md
  • trust/test-fixture.md
  • trust/rollback.md
  • trust/privacy.md
  • trust/threat-model.md
  • trust/external-services.md
  • trust/pricing-boundary.md
  • publish/sanitized-demo-report.md
  • CHANGELOG.md

Monetization Boundary

This skill is free/distribution-first. It has no payment code, no checkout, and no paid ClawHub assumption.

No hosted API, checkout, paid listing, invoice flow, or donation link is included.

Related skills

OpenClaw cloud security guardrail that enforces pre-execution checks, source trust classification, taint tracking, metadata endpoint blocking, and output red...

27 installs

Subscribe AI agents to a community-curated security advisory feed for AI-agent threats.

by davida-ps103 installs1 stars

Perform a strict, evidence-based, read-only security assessment of the current OpenClaw host, review each NOT_TESTED item through targeted OpenClaw Agent inv...

OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy...

Test the latest OpenClaw main commit through an isolated OCM copy or an explicitly approved in-place gateway update, then guide structured release feedback.

3 installs

Install, configure, operate, and productize OA monitoring and self-heal workflows for OpenClaw workspaces. Use when Codex needs to set up or repair `oa-cli`,...

16 installs