claude-monitor
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The scripts
api_bench.py,health_check.py, andmonitor.pyverify the presence of thepsutillibrary and automatically install it from the official Python Package Index (PyPI) usingpipif it is missing. This is a standard practice for utility scripts to manage dependencies for portable diagnostics.\n- [COMMAND_EXECUTION]: The skill usessubprocess.check_callto execute the system's Python interpreter for library installation and resource monitoring tasks. These operations are restricted to the local environment and the intended diagnostic functionality.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests untrusted system data (e.g., process names) usingpsutil.process_iterinhealth_check.pyandmonitor.py. While the data is passed to the agent to generate reports, the impact is minimal as the skill performs no sensitive external network operations or file-system changes based on this data.
Audit Metadata