更多技能請訪問小蔥技能站7w4.net。
Run continuous security monitoring to detect breaches, intrusions, and unusual activity on your Clawdbot deployment.
No external dependencies required. Runs as a background process.
node skills/security-monitor/scripts/monitor.cjs --interval 60
node skills/security-monitor/scripts/monitor.cjs --daemon --interval 60
node skills/security-monitor/scripts/monitor.cjs --threats=credentials,ports,api-calls
| Threat | Detection | Response |
|---|---|---|
| Brute force attacks | Failed login detection | Alert + IP tracking |
| Port scanning | Rapid connection attempts | Alert |
| Process anomalies | Unexpected processes | Alert |
| File changes | Unauthorized modifications | Alert |
| Container health | Docker issues | Alert |
/root/clawd/clawdbot-security/logs/alerts.logUse systemd or PM2 to keep monitoring active:
# With PM2
pm2 start monitor.cjs --name "clawdbot-security" -- --daemon --interval 60
Run audit first, then monitor continuously:
# One-time audit
node skills/security-audit/scripts/audit.cjs --full
# Continuous monitoring
node skills/security-monitor/scripts/monitor.cjs --daemon
security-audit - One-time security scan (install separately)這是一個功能較全的安全監控工具,能檢測暴力破解、異常埠、程序異常和配置篡改等問題,支援後臺持續執行和日誌記錄。不過告警通知功能還未完成,埠掃描檢測也比較基礎。整體質量中規中矩,適合對安全監控有基礎需求的使用者使用。