Portainer

Comprehensive management for Portainer CE environments and stacks. Supports listing environments, managing Docker Compose/Swarm stacks, and executing raw Docker commands via proxy. Use when the user needs to deploy apps, check container status, or manage networks within Portainer. Requires a Portainer API Key configured in OpenClaw.

Key things to check before installing: - Do not install on production until you verify the credential handling. The Python script expects PORTAINER_API_TOKEN and PORTAINER_API_URL environment variables, but the registry metadata lists none and SKILL.md tells you to set OpenClaw config keys—confirm how your OpenClaw instance maps config keys to environment variables. - Treat the Portainer API token as highly sensitive. Create a token with the minimum privileges required (prefer read-only where possible) and avoid using a full admin token unless absolutely necessary. - Review and test the included scripts in an isolated environment first. The skill proxies arbitrary Docker API calls (can start/stop containers, read files, etc.) and also disables TLS verification (verify=False), which weakens transport security. - Ask the publisher or maintainer to fix packaging inconsistencies: package.json lists Python libraries as Node deps (likely incorrect) and metadata should declare the required credential(s) explicitly (primaryEnv or requires.env). Also request that TLS verification be optional (not disabled by default) and that the code documents where OpenClaw will source the token. - If you can’t verify these issues, avoid granting a real Portainer token. Instead, test using a throwaway Portainer instance with no access to critical hosts/data. Confidence: high that these inconsistencies are real and should be resolved before trusting the skill.

Type: OpenClaw Skill Name: portainer-skill-openclaw Version: 0.1.1 The skill is classified as suspicious due to two main reasons found in `scripts/portainer_manager.py`. First, all HTTP requests to the Portainer API disable SSL certificate verification (`verify=False`), making the communication vulnerable to Man-in-the-Middle attacks and potentially exposing the Portainer API key and sensitive commands. Second, the `execute_docker_command` function allows the OpenClaw agent to proxy arbitrary Docker API requests through Portainer, granting extremely broad control over the underlying Docker environment, which is a high-risk capability that could lead to system compromise if exploited.