Shadow AI Monitor

A professional web dashboard system for tracking employee AI tool usage, identifying data exposure risks, and measuring PIPEDA compliance.

What This Skill Does

Generates enterprise-grade HTML dashboards showing:

• - 📊 AI Tool Usage Analytics - Track which tools employees use (ChatGPT, Claude, Gemini, Copilot, Midjourney, Grok, Perplexity, Cursor, GitHub Copilot)
• ⚠️ Risk Analysis - Classify data exposure as Low/Medium/High risk
• 📋 Compliance Scoring - PIPEDA compliance score (0-100) with detailed requirement breakdown
• 👥 Employee Insights - Anonymized usage patterns and heatmaps
• 📈 Trend Tracking - Daily usage trends and event logs
• 📄 Board-Ready Reports - PDF export with professional styling

Perfect For

• - Security Teams monitoring shadow AI adoption
• CTOs assessing compliance gaps
• Legal/Compliance teams tracking data exposure
• Sales Teams demoing AI governance products
• Consultants delivering AI risk assessments

Quick Start

Generate a demo dashboard:

CODEBLOCK0

Open shadow-ai-dashboard.html in your browser.

Features

🎯 Interactive Dashboard

Click to Explore:

• - Employee Bars → See top 3 riskiest events, tools used, data categories, dates
• Compliance Score → View 5 PIPEDA requirements, pass/fail status, specific fixes
• Export Button → Generate PDF with letterhead styling

Key Metrics:

• - PIPEDA compliance score (color-coded: green ≥85, yellow ≥70, red <70)
• Risk event breakdown (High/Medium/Low)
• Top 3 AI tools by usage
• Top 10 employees (anonymized)

Visualizations:

• - Bar charts: Tool usage, employee activity
• Doughnut chart: Risk distribution
• Line chart: Daily trends
• Heat map: Employee usage intensity
• Scrollable event log (last 20 events, high-risk highlighted)

📋 Personalized Recommendations

Auto-generated advice based on actual data patterns:

• - References specific employees and percentages
• Tool-specific recommendations (e.g., "ChatGPT accounts for 48% of usage")
• Compliance-specific action items
• Example: "Employee 5 generated 8 high-risk events involving client matters — review recommended"

🔒 PIPEDA Compliance Analysis

Detailed breakdown of 5 core requirements:

1. 1. Consent for Collection
2. Limiting Use, Disclosure & Retention
3. Safeguards
4. Openness
5. Individual Access

Each shows:

• - Pass/Fail status
• Requirement description
• Specific action items using your actual data

📊 Demo Data Generator

Creates realistic data for a 50-person Canadian organization:

Configurable:

• - Company name (default: Morrison & Associates)
• Employee count
• AI tools tracked
• Data categories (Client Legal, Financial, Health, Personal, etc.)
• Risk distribution
• Time period (last 7 days default)

Realistic Patterns:

• - Mix of 9 different AI tools
• Varied risk levels (~25% high, ~35% medium, ~40% low)
• Employee anonymization (Employee 1, Employee 2, etc.)
• Concerning patterns for demo impact

Files

CODEBLOCK1

Installation

Via ClawHub:
CODEBLOCK2

Manual:
CODEBLOCK3

Usage

Basic Demo Dashboard

CODEBLOCK4

This generates:

• - shadow-ai-data.json - Raw usage data
• INLINECODE2 - Interactive dashboard

Customizing Demo Data

Edit scripts/generate_demo_data.js to customize:

Company Name:
CODEBLOCK5

Employee Count:
CODEBLOCK6

AI Tools Tracked:
CODEBLOCK7

Data Categories:
CODEBLOCK8

Automated Weekly Reports

Set up with OpenClaw cron:

CODEBLOCK9

Technical Details

Data Structure

CODEBLOCK10

Risk Scoring

High Risk:

• - Client legal matters
• Financial records
• Health information

Medium Risk:

• - Personal information
• Internal memos
• Proprietary data

Low Risk:

• - General questions
• Code templates
• Public research

Compliance Score Calculation

CODEBLOCK11

Example:

• - 268 total events
• 90 high-risk (34%) → -68 points
• 83 medium-risk (31%) → -15.5 points
• Score: 16/100

Dashboard Technology

• - Pure JavaScript - No npm install required
• Chart.js via CDN - Loaded from jsDelivr
• Dark Theme - Professional enterprise styling
• Responsive Design - Works on desktop and tablet
• Print-Optimized - Clean PDF export with letterhead

Use Cases

1. CTO Demo

Script:

"This is Morrison & Associates, a 50-person law firm. Over 7 days, we detected 268 AI tool events. Their PIPEDA compliance score is 16/100 because 34% of interactions involved client legal matters and health records shared with unapproved AI tools."

Click compliance score → Show specific PIPEDA failures
Click Employee 38 → Show their risky events
Click Export → Board-ready PDF

2. Security Assessment

Generate dashboard with your organization's data:

1. 1. Monitor Slack/Teams/Email for AI tool mentions
2. Log to JSON format matching data structure
3. Run dashboard generator
4. Present findings to security team

3. Sales Presentation

Demo realistic data showing:

• - Concerning compliance gaps
• Specific risk patterns
• Clear ROI through risk reduction
• Professional, board-ready output

4. Compliance Audit

Track progress over time:

• - Generate weekly snapshots
• Compare compliance scores
• Identify trends (improving/worsening)
• Document remediation efforts

Security & Privacy

✅ No External API Calls - All processing local
✅ No Data Collection - Demo data never leaves your machine
✅ No Credentials Required - Pure JavaScript execution
✅ Anonymized Data - Employee IDs, no PII in demo
✅ Open Source - Review all code before running

Requirements

• - Node.js (any recent version)
• Web Browser (Chrome, Firefox, Safari, Edge)
• No npm packages - Uses only Node.js built-ins

Roadmap

Future enhancements:

• - [ ] Real-time monitoring integration
• [ ] Multi-company comparison
• [ ] Historical trend analysis
• [ ] Custom compliance frameworks (GDPR, HIPAA, SOC 2)
• [ ] Email delivery of reports
• [ ] Slack/Teams integration
• [ ] Live data ingestion from DLP tools

Support & Contribution

• - Issues: Report bugs or request features on ClawHub
• Questions: OpenClaw Discord community
• Contributions: Submit improved visualizations, compliance frameworks, or data sources

License

MIT - Free for personal and commercial use

Credits

Built with OpenClaw by the automation engineering community.