Interact with Astra's Docker container workspace by executing commands and reading or writing files at /workspace inside the astra-env container.

This skill runs arbitrary shell commands inside a container using 'sudo docker exec' and can read/write files in /workspace. Before installing: (1) confirm you trust the environment and the container name 'astra-env' exists; (2) understand that it requires access to the docker daemon (sudo) even though the metadata doesn't declare that—this is effectively elevated local privilege; (3) review index.js yourself for unsafe quoting/escape edge cases and consider restricting allowed commands or paths; (4) do not install on machines with sensitive mounts or exposed host docker socket unless you fully trust the skill and its maintainer. If you need only a narrow set of operations, prefer a version that limits commands or declares required binaries/permissions explicitly.

Type: OpenClaw Skill Name: astra-docker Version: 1.0.0 The skill is classified as suspicious due to multiple shell injection vulnerabilities in `index.js`. Both the `docker_exec` and `docker_write_file` tools construct shell commands using user-provided input (`command`, `workdir`, `filepath`) without adequate sanitization, allowing an attacker or a misbehaving agent to execute arbitrary commands inside the `astra-env` Docker container. While the skill's stated purpose is to interact with a Docker container, these vulnerabilities represent a significant security risk, even though there is no clear evidence of intentional malicious behavior (e.g., data exfiltration or backdoor installation).