Borrowing it
Nothing to install: this file belongs to schmitthub/clawker. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/schmitthub/clawker/main/.agents/skills/monitoring-checks/SKILL.mdgit clone --depth 1 https://github.com/schmitthub/clawkerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/schmitthub/clawker/monitoring-checks)<a href="https://agentmods.dev/skills/schmitthub/clawker/monitoring-checks"><img src="https://agentmods.dev/badge/skills/schmitthub/clawker/monitoring-checks/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/schmitthub/clawker/monitoring-checks"><img src="https://agentmods.dev/badge/skills/schmitthub/clawker/monitoring-checks.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.03624 |
| Opus 5.5 | $0.00000 | $0.01450 |
| Sonnet 5.5 | $0.00000 | $0.00725 |
| Haiku 4.5 | $0.00000 | $0.00362 |
Grade A, and why
monitoring-checks scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 159 lines — stays where its author put it; the contents beside it link to each section on GitHub.
monitoring-checks
Package contract and runtime UAT: internal/monitor/AGENTS.md.
Backend: logs in OpenSearch — six indices
claude-code(Claude Code OTLP push, untrusted port),clawker-cli(host CLI OTLP push, untrusted port),clawkercp(mTLS-gated CP push),clawker-envoy(firewall data-plane access logs, mTLS-gated),clawker-coredns(firewall DNS query logs, mTLS-gated), andclawker-ebpf-egress(eBPF per-decision egress events from netlogger,service.name=ebpf-egress, mTLS-gated). Cross-index queries use patternclawkercp,claude-code,clawker-cli,clawker-envoy,clawker-coredns,clawker-ebpf-egress. Traces in OpenSearch SS4O datasettraces/ namespaceclawker(Claude Code beta export gated onCLAUDE_CODE_ENHANCED_TELEMETRY_BETA=1, both env vars baked into the image). Metrics in Prometheus. UIs: OpenSearch Dashboards (:5601) for logs+traces, Prometheus (:9090) for metrics. Resource attributes are written FLAT atresource.*(soresource.service.name,resource.project,resource.agent) by the OTelopensearchexporter(SS4O shape). Theenvelope-normalizeingest pipeline only mirrorsresource.service.name→resource.attributes.service.name(the one path OSD Explore's default log columns hard-code) — other resource attrs are NOT duplicated underresource.attributes.*. Prefer the flatresource.<k>path for queries. Event content lives underattributes.*(attributes.event.name,attributes.tool_name).Stack ships preconfigured —
clawker-opensearch-bootstrap(one-shot compose service, seeinternal/monitor/templates/opensearch-bootstrap/) applies component + index templates, the default ISM retention policy, theclawker_prometheusdirect-query datasource, an OSDClawkerworkspace withfeatures: ["use-case-all"], and Dashboards saved objects (index patterns for every log index + the preconfiguredClaude Codedashboard with KPI strip and filter controls) on everymonitor up. After the import, bootstrap writes each index pattern's field list from the live mapping: OpenSearch Dashboards 3.9 no longer fetches it at load time, and a pattern withoutfieldsmakes every field-naming visualization fail with "Could not locate that index-pattern-field". The visualization surface grows via the NDJSON-export-and-bake workflow intointernal/monitor/templates/opensearch-bootstrap/saved-objects/clawker.ndjson.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed 3bae5bed154c
- 1mo ago First seen · 159 lines · 0 tokens per session scan A bb1ada8ba68a
monitoring-checks is a skill published in the GitHub repository schmitthub/clawker (58 stars, last pushed today), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 3,624 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-08.
Other skills, from other repositories
ai-deploy
Deploy a generated project (one process or several) to agent-sandboxes with scale-to-zero: idle sandboxes pause and auto-resume (process restarted) on the next HTTP request. Use when asked to deploy, host, or preview generated code through the sandbox platform.
e2b
Core E2B SDK knowledge — correct imports, namespacing, terminology, and API patterns. Activates automatically when working with E2B sandboxes, templates, or code execution.
pkf-writing
Author, update, convert, validate, persist, and render PKF (.pkf) content through message-inline, Library Asset, or Memory Page carriers. Use for structured reports, knowledge pages, delivery cards, or any .pkf body. NOT for recall, memory-graph placement, or curation decisions — those belong to the memory skill.
prismer-python-debugpy
Debug Python: pdb REPL + debugpy remote (DAP).
web-artifacts-builder
Suite of tools for creating elaborate, multi-component Prismer HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts.
memory-import
Bulk-import an external knowledge base into Prismer memory via the three-layer import pipeline (07 §3.1). Use when the user asks to import/migrate documents, a knowledge base, or notes into workspace memory. Layer 1 lands raw documents (zero LLM, instantly searchable); Layer 2 is YOUR distillation work — you read the…