Openclaw Devboxes Skill

This skill does roughly what it says (spawn browser/VNC/VSCode containers and expose them via Traefik or Cloudflare), but it asks you to give the agent host-level powers and sensitive credentials. Before installing: 1) Inspect the container image (ghcr.io/adshrc/openclaw-devbox:latest) and the included scripts; only proceed if you trust the publisher. 2) Avoid following the advice to ‘chmod 666 /var/run/docker.sock’ or to make host dirs world-writable; instead add the container user to the docker group or use least-privilege socket access patterns. 3) If using Cloudflare, create a narrowly-scoped API token (only Zone:DNS:Edit and Tunnel:Edit if required) and rotate it after onboarding; confirm the skill will store tokens securely. 4) Prefer mounting a dedicated host directory (not a system path) and review any files written to the Traefik mount. 5) Consider running the onboarding steps manually (pull image, run scripts, verify DNS calls) rather than allowing the agent to run them automatically. 6) Ask the maintainer why required credentials/env vars are missing from the registry metadata and request an explicit listing of required permissions. If you cannot audit the image and scripts, treat this skill as high-risk and avoid granting broad host privileges.