OpenClaw Docker Setup

Run OpenClaw inside Docker on Linux with Tailscale remote access. Complete setup guide covering installation, configuration, and critical gotchas. Trigger ph...

This skill appears to be a legitimate Docker + Tailscale setup for OpenClaw, but several issues warrant caution: - Metadata mismatch: the registry lists no required env vars, but the included files and SKILL.md clearly expect ANTHROPIC_API_KEY or OPENAI_API_KEY and an OPENCLAW_GATEWAY_TOKEN. Confirm which env vars you must supply before installing. - Inspect the included scripts before running. references/docker-setup.sh reads your .env and ~/.openclaw config and prints access URLs. The tailscale command path echoes the full gateway token (not masked) — that can leak the token to your terminal or logs. Consider editing the script to never print full tokens. - Be careful with optional volume mounts. The docker-compose template shows optional mounts for ~/.config/gh, /home/linuxbrew, and other host paths. Mounting those will expose host credentials and tokens to the container — only enable mounts you absolutely trust and understand. - Tailscale and package instructions: the skill targets Linux/Ubuntu but sometimes suggests 'brew install tailscale' — use apt on Ubuntu and verify commands before running. The tailscale package URLs used are the official pkgs.tailscale.com domain, which is expected, but double-check commands you copy/paste. - Image provenance: the compose references ghcr.io/openclaw/openclaw:latest. If you do not trust that image, build from source or pin a specific trusted digest instead of :latest. If you want this skill to be safer: ask the author (or check the homepage/repo) to fix metadata (declare required envs), avoid printing secrets in scripts, and provide a versioned/pinned image and clearer notes about which host mounts are strictly needed. If you proceed, don't expose port 18789 to the public internet, avoid mounting host credential directories, and rotate tokens if they are ever printed to shared logs.

Type: OpenClaw Skill Name: openclaw-docker-linux Version: 1.0.4 The skill bundle provides legitimate documentation and scripts for setting up OpenClaw in a Docker environment on Linux. It includes a management script (docker-setup.sh) and detailed configuration templates (docker-config.md) that follow standard practices for containerized applications. While the setup involves elevated privileges (sudo) and remote access (Tailscale), these are clearly documented with appropriate security warnings regarding credential mounting and network exposure. No evidence of malicious intent, data exfiltration, or obfuscation was found.