← Back to Skills Marketplace
780
Downloads
0
Stars
3
Active Installs
1
Versions
Install in OpenClaw
/install virtualboxmanager
Description
Control and manage VirtualBox virtual machines directly from openclaw. Start, stop, snapshot, clone, configure and monitor VMs using VBoxManage CLI. Supports...
Usage Guidance
This skill appears to do what it claims: it runs VBoxManage commands to manage VMs and does not request unrelated secrets or installs. Before installing, ensure VBoxManage/VirtualBox is installed and that you run the skill under an account with only the necessary local privileges. Be cautious with inputs you provide to the skill (VM names, paths, descriptions, ports) because the helper uses shell execution (child_process.exec) and could be vulnerable to command injection if given untrusted strings—avoid passing untrusted or unsanitized input. Note also an optional VBOXMANAGE_PATH environment variable can override the binary path; if you want to lock behavior, set or audit that environment variable. If you need stronger guarantees, review the scripts/virtualbox-utils.ts code or run the skill in a restricted environment.
Capability Analysis
Type: OpenClaw Skill
Name: virtualboxmanager
Version: 0.0.1
The skill bundle is classified as suspicious due to a critical shell injection vulnerability in `scripts/virtualbox-utils.ts`. The `vboxCommand` function directly interpolates user-controlled arguments into `child_process.exec` calls without proper sanitization or escaping. This flaw allows an attacker to inject arbitrary shell commands, potentially leading to remote code execution on the host system where the OpenClaw agent is running. While this is a severe vulnerability, there is no clear evidence of intentional malicious behavior (e.g., data exfiltration, backdoor installation) within the provided code, aligning it with a 'suspicious' classification rather than 'malicious'.
Capability Assessment
Purpose & Capability
Name/description, SKILL.md, and the included helper script all focus on driving the VBoxManage CLI and VM lifecycle. The only required binary listed is VBoxManage, which is appropriate and expected for this functionality.
Instruction Scope
Instructions and the helper code issue many shell commands via child_process.exec to run VBoxManage. That is necessary for this skill, but executing commands built from user-provided values can allow shell injection if callers pass untrusted input. The SKILL.md and code do not show explicit input sanitization—exercise caution when supplying arbitrary strings (paths, VM names, descriptions, ports, etc.).
Install Mechanism
No install spec is provided (instruction-only skill with a helper script). Nothing is downloaded or written to disk by an installer, which keeps install risk low.
Credentials
The skill declares no required environment variables but the code checks process.env.VBOXMANAGE_PATH as an optional override for the VBoxManage binary. This is reasonable, but the environment variable is not listed in the metadata; users should be aware an env override exists.
Persistence & Privilege
always is false and there are no requested config paths or credentials. The skill does not request persistent elevated privileges or modify other skills' configuration.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install virtualboxmanager - After installation, invoke the skill by name or use
/virtualboxmanager - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.0.1
Control and manage VirtualBox virtual machines directly from openclaw. Supports full lifecycle management including VM creation, network configuration, shared folders, and performance monitoring.
Metadata
Frequently Asked Questions
What is Virtual Box Manager?
Control and manage VirtualBox virtual machines directly from openclaw. Start, stop, snapshot, clone, configure and monitor VMs using VBoxManage CLI. Supports... It is an AI Agent Skill for Claude Code / OpenClaw, with 780 downloads so far.
How do I install Virtual Box Manager?
Run "/install virtualboxmanager" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Virtual Box Manager free?
Yes, Virtual Box Manager is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Virtual Box Manager support?
Virtual Box Manager is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Virtual Box Manager?
It is built and maintained by 0xFratex (@0xfratex); the current version is v0.0.1.
More Skills