ZeroTier Remote Web Access

通过 ZeroTier 自动绑定 OpenClaw Gateway 到虚拟 IP，实现安全便捷的远程 WEB 控制和访问管理功能。

This skill appears to do what it says: it will back up and modify ~/.openclaw/openclaw.json, bind the gateway to 0.0.0.0, add your ZeroTier IP to allowedOrigins, and intentionally relax authentication (allowInsecureAuth = true, dangerouslyDisableDeviceAuth = true). Those are powerful, security-reducing changes — only enable them if you fully understand the risks and trust all devices on the ZeroTier network. Before running: 1) Manually inspect the scripts (they're included) and confirm you accept the auth changes. 2) Make an independent manual backup of ~/.openclaw/openclaw.json and test recovery. 3) Do not blindly run the suggested `curl | sudo bash` installer — instead use official distribution channels or review the installer script. 4) After enabling, rotate or securely manage tokens printed by the script and restrict ZeroTier network membership to trusted devices. 5) Note there are some coding issues (use of await/import in places that may cause runtime errors); test in a safe environment before using on production systems. If you want, I can highlight the exact lines that change authentication and show a safer recommended config alternative.

Type: OpenClaw Skill Name: zerotier-remote-web Version: 1.0.1 The skill is classified as suspicious due to several security-weakening configurations in `scripts/enable-remote.mjs` and a risky prerequisite installation method in `SKILL.md`. Specifically, `enable-remote.mjs` configures the OpenClaw gateway to bind to `0.0.0.0` (all network interfaces) and sets `controlUi.allowInsecureAuth: true` and `controlUi.dangerouslyDisableDeviceAuth: true`, which significantly expands the attack surface and weakens the authentication mechanism. While these changes are intended to enable remote access as per the skill's stated purpose, they introduce critical vulnerabilities. Additionally, `SKILL.md` suggests `curl https://install.zerotier.com | sudo bash` for ZeroTier installation, an inherently risky pattern if executed by the agent.