Clawdos

Overview

This skill exposes a CLI wrapper around the Clawdos REST API, allowing you to operate a Windows machine securely from OpenClaw via shell commands. Instead of loading tools, use exec to call the standalone python script scripts/clawdos.py.

⚠️ SECURITY & SANDBOX MECHANISM

File System Sandbox Protection:

• All file system operations (fs_list, fs_read, fs_write, fs_delete, fs_move) are restricted to a sandboxed root directory on the Windows host.
• The sandbox root is configured via the CLAWDOS_FS_ROOT_ID environment variable and enforced server-side.
• The Clawdos service prevents access to files outside the designated sandbox directory. Path traversal attempts (e.g., ../../../) are blocked.
• This isolation ensures that skill operations cannot accidentally or intentionally access sensitive system files, user documents, or configuration outside the permitted scope.

Network Isolation:

• The Clawdos service only communicates with the configured CLAWDOS_BASE_URL and does not establish unauthorized external connections.
• All API calls are authenticated via CLAWDOS_API_KEY and encrypted over HTTPS when applicable.

⚠️ AUTHORIZATION & CAPABILITY WARNINGS

This skill grants access to powerful Windows automation capabilities. Users must explicitly understand and authorize the following operations:

1. Shell Command Execution (shell_exec)

   • Can execute arbitrary PowerShell or cmd commands on the Windows host.
   • Even within the sandbox, commands can potentially modify system state, install software, or alter configurations.
   • Only use with trusted sources and explicit user approval.

2. File Deletion (fs_delete)

   • Permanently removes files and directories within the sandbox.
   • No recovery mechanism exists once deleted.
   • Exercise extreme caution; confirm deletion intent before execution.

3. File Upload/Download (--file, --out)

   • The CLI script can read local files and upload them to the Windows host (within sandbox).
   • The script can download remote files from the Windows host to the agent system.
   • Do not use with sensitive files or untrusted remote systems.

4. Persistent Screen/Window Monitoring

   • Visual actions (screen_capture, window_list, window_focus) can observe active GUI content.
   • If sensitive information is visible on screen, it may be captured.

⚠️ Requirements

This skill requires a corresponding server running on your Windows host. Ensure the Windows host is running danzig233/clawdos. The connection parameters (CLAWDOS_BASE_URL and CLAWDOS_API_KEY) must be configured via OpenClaw's skill configuration UI or environment variables, as specified in this file's metadata.

Usage