A lightweight Host Intrusion Detection System (HIDS) has been developed, focusing on monitoring ports, critical files, high-risk events, and commands with minimal noise and high configurability. This tool aims to alleviate security concerns for frameworks like OpenClaw on Linux servers. The system's efficiency helps reduce reliance on expensive models, offering a cost-effective solution for maintaining server security without excessive token usage.