元察 yotta-logwatch
元察 —— 跨智能体的安全日志分析检测技能：零依赖自研解析 auth/secure、Web 访问日志（common/combined）、PowerShell 脚本块日志、Windows 事件日志（Security/System），检测爆破 / webshell / 扫描 / 异常登录 / 可疑脚本块 / 可疑进程 / 账户操作 / 日志清空，输出时间线与中文教学报告。触发：用户给出登录日志 / Web 访问日志 / PowerShell 日志 / Windows 事件日志，要分析入侵痕迹、排查异常活动、审计本地日志时。边界：只读本地日志文件；不联网、不主动扫描、不修改任何其内容；仅用于已获授权
as observed 2026-10-02T07:46:18.975Z- Identifier
yotta-logwatch- Source
- ClawHub
- Version observed
- 0.3.1
- Source repository
- not published
- Repository observation
- No source repository listed
- First observed here
- 2026-08-28T22:06:28.212Z
- Observations recorded
- 5
- Installs (reported upstream)
- 1
- Weekly downloads (upstream)
- 651
- Declared license
- MIT-0
Observation history
2026-10-02T07:46:18.975Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"yotta-logwatch 0.3.0\n\n- 增加 skill category 字段为 it-ops-security，便于分类检索和展示。\n- 安装脚本 install.sh 增加严格安装边界，安装行为需用户显式确认，防止未授权批量写入和符号链接目标。\n- 文档（SKILL.md）更新：详细说明了新的安装安全边界和相关用户责任。\n- 清理旧 | "- Improved skill and documentation metadata for clarity.\n- Refactored install scripts for greater robustness and reliability.\n- General code cleanup and updates to maintain comp |
latestVersion |
"0.3.0" | "0.3.1" |
2026-09-26T01:46:07.395Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"- 增加 slug、displayName、summary、tags 和 homepage 字段，完善 SKILL.md 元数据。\n- 删除 LICENSE、NOTICE、assets/banner.png、scripts/test_yotta_logwatch.py、skill-card.md 等冗余文件。\n- 版本号升级至 0.2.9，并适配 pa | "yotta-logwatch 0.3.0\n\n- 增加 skill category 字段为 it-ops-security，便于分类检索和展示。\n- 安装脚本 install.sh 增加严格安装边界，安装行为需用户显式确认，防止未授权批量写入和符号链接目标。\n- 文档（SKILL.md）更新：详细说明了新的安装安全边界和相关用户责任。\n- 清理旧 |
latestVersion |
"0.2.9" | "0.3.0" |
2026-09-19T21:21:32.220Z
Fields that differed: license changelog description latestVersion
| Field | Before | After |
|---|---|---|
license |
null | "MIT-0" |
changelog |
"- Removed the file skill-card.md.\n- No other changes to functionality or documentation." | "- 增加 slug、displayName、summary、tags 和 homepage 字段，完善 SKILL.md 元数据。\n- 删除 LICENSE、NOTICE、assets/banner.png、scripts/test_yotta_logwatch.py、skill-card.md 等冗余文件。\n- 版本号升级至 0.2.9，并适配 pa |
description |
"元察 —— 跨智能体的安全日志分析检测技能：零依赖自研解析 auth/secure、Web 访问日志（common/combined）、PowerShell 脚本块日志、Windows 事件日志（Security/System），检测爆破 / webshell / 扫描 / 异常登录 / 可疑脚本块 / 可疑进程 / 账户操作 / 日志清空，输出时间线与中 | null |
latestVersion |
"0.2.8" | "0.2.9" |
2026-09-03T07:20:35.503Z
Fields that differed: changelog description latestVersion topics
| Field | Before | After |
|---|---|---|
changelog |
null | "- Removed the file skill-card.md.\n- No other changes to functionality or documentation." |
description |
null | "元察 —— 跨智能体的安全日志分析检测技能：零依赖自研解析 auth/secure、Web 访问日志（common/combined）、PowerShell 脚本块日志、Windows 事件日志（Security/System），检测爆破 / webshell / 扫描 / 异常登录 / 可疑脚本块 / 可疑进程 / 账户操作 / 日志清空，输出时间线与中 |
latestVersion |
null | "0.2.8" |
topics |
["security"] | ["webshell检测","入侵检测","安全日志","异常登录","日志分析"] |
Correction
If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.