signalgrid_process_snapshot
Get a live snapshot of running processes with PID, parent, user, CPU, memory, and command path. Filter by name to confirm an agent is running or spot suspicious processes.
Instructions
Point-in-time snapshot of running processes (pid, parent, user, %CPU, %MEM, command path).
Use to confirm an agent/daemon is actually running (filter by name) or to spot suspicious processes. Full executable paths are included -- feed a suspicious one to signalgrid_codesign_inspect.
Args: name_contains: substring filter on the command path. sort_by: cpu (default) | memory | pid. limit/offset: pagination (default 25 per page). response_format: markdown table (default) or JSON envelope; items have pid, ppid, user, cpu_pct, mem_pct, command.
Returns: str: rendered table or JSON string; "Error: ..." if ps failed.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum results to return | |
| offset | No | Results to skip for pagination | |
| sort_by | No | Sort order: 'cpu' (default), 'memory', or 'pid' | cpu |
| name_contains | No | Case-insensitive substring filter on the command path, e.g. 'python' | |
| response_format | No | 'markdown' for a human-readable table, 'json' for machine-readable data | markdown |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |