Clawdos

Overview

This skill exposes a CLI wrapper around the Clawdos REST API, allowing you to operate a Windows machine securely from OpenClaw via shell commands. Instead of loading tools, use exec to call the standalone python script scripts/clawdos.py.

⚠️ SECURITY & SANDBOX MECHANISM

File System Sandbox Protection:

• All file system operations (fs_list, fs_read, fs_write, fs_delete, fs_move) are restricted to a sandboxed root directory on the Windows host.
• The sandbox root is configured via the CLAWDOS_FS_ROOT_ID environment variable and enforced server-side.
• The Clawdos service prevents access to files outside the designated sandbox directory. Path traversal attempts (e.g., ../../../) are blocked.
• This isolation ensures that skill operations cannot accidentally or intentionally access sensitive system files, user documents, or configuration outside the permitted scope.

Network Isolation:

• The Clawdos service only communicates with the configured CLAWDOS_BASE_URL and does not establish unauthorized external connections.
• All API calls are authenticated via CLAWDOS_API_KEY and encrypted over HTTPS when applicable.