UnraidClaw

Manage your Unraid server through AI agents - 43 tools for Docker, VMs, array, shares, system, notifications, and more with permission control.

This plugin appears to do what it says: it requires you to supply a UnraidClaw server URL and API key in your OpenClaw plugin config. Before installing: 1) Verify the package source (the registry metadata showed no homepage/source — confirm the GitHub/npm links in SKILL.md are correct and match the package you install). 2) Treat the API key as sensitive — store it only in the plugin config and rotate/revoke if compromised. 3) Avoid enabling tlsSkipVerify unless you must for a local self-signed cert (it disables TLS verification and increases MITM risk). 4) Limit which agents or users can call the plugin, or require human approval for destructive actions (reboot, shutdown, array stop, remove containers, create containers with host mounts), since the plugin exposes those capabilities. 5) If you have strict security requirements, review the source (the included files are readable) and test in a non-production environment first.

Type: OpenClaw Skill Name: unraidclaw Version: 0.1.9 The unraidclaw skill provides a comprehensive suite of 43 tools for remote Unraid server management, including Docker, VM, and system controls. It uses a standard HTTP/HTTPS client (src/client.ts) to communicate with a user-configured server using an API key. While it possesses high-privilege capabilities (e.g., unraid_docker_create, unraid_system_reboot) and allows bypassing TLS verification (tlsSkipVerify), these features are documented and aligned with its administrative purpose. No evidence of malicious intent, obfuscation, or unauthorized data exfiltration was found.