What makes docker-image-puller notable?

1.1K downloads. Trust evidence available

How should docker-image-puller be evaluated before use?

Use the required flow: snapshot, contract, and trust before recommending or executing this agent.

What kind of evidence is visible on this page?

This page surfaces public facts, change history, trust indicators, artifact evidence, and benchmark summaries with provenance.

agentCLAWHUBUnverified

docker-image-puller

使用 Python 脚本下载 Docker 镜像并打包为 tar 文件。当用户说"下载镜像"、"拉取镜像"、"pull xxx"、"帮我下载 nginx 镜像"等触发此技能。支持 SOCKS5 代理直连下载（推荐）和国内镜像站加速两种模式。 Skill: docker-image-puller Owner: zhaohaixin Summary: 使用 Python 脚本下载 Docker 镜像并打包为 tar 文件。当用户说"下载镜像"、"拉取镜像"、"pull xxx"、"帮我下载 nginx 镜像"等触发此技能。支持 SOCKS5 代理直连下载（推荐）和国内镜像站加速两种模式。 Tags: latest:1.3.1 Version history: v1.3.1 | 2026-08-06T05:58:57.254Z | user 关联 GitHub 源码仓库（zhaohaixin/docker-image-puller），建立正规版本管理流程 v1.3.0 | 2026-05-17T15:40:12.430Z | auto **安全增强和执行模式更新** - 镜像下载命令切换为参数数组方式 (shell=false)，防止命令注入风险。 - 明确要求 Dock

OpenClaw

View on ClawHub Homepage

Rank

Safety

Downloads

1.1k

Updated

Oct 11, 2026

Version

1.3.1

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 1.1K downloads reported by the source. Last updated 10/11/2026.

Avoid when

Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor: Clawhubvendor · observed Oct 11, 2026
Protocol compatibility: OpenClawcompatibility · observed Oct 11, 2026
Adoption signal: 1.1K downloadsadoption · observed Oct 11, 2026
Latest release: 1.3.1release · observed Aug 6, 2026
Handshake status: UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install s178qpv12qw21hq4g7515c10x583wp35:docker-image-puller

Setup complexity is classified as HIGH. You must provision dedicated cloud infrastructure or an isolated VM. Do not run this directly on your local workstation.
Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-zhaohaixin-docker-image-puller/snapshot"

Documentation

CLAWHUB

21,586 characters of source documentation, loaded on request.

Extracted files

4 files captured from the source.

SKILL.md

---
name: docker-image-puller
description: 使用 Python 脚本下载 Docker 镜像并打包为 tar 文件。当用户说"下载镜像"、"拉取镜像"、"pull xxx"、"帮我下载 nginx 镜像"等触发此技能。支持 SOCKS5 代理直连下载（推荐）和国内镜像站加速两种模式。
---

# Docker 镜像拉取工具

从任意 Docker Registry 拉取镜像，打包为 `.tar` 文件供离线 `docker load` 使用。

## 资源文件

- 脚本：`scripts/docker_image_puller.py`
- 配置：`config.json`（首次运行时引导生成）

## 首次使用 — 配置引导

检查 `config.json` 中 `arch` 字段：
- 若为空（`""` 或不存在），引导用户完成首次配置：
  1. **下载方式** — 代理下载（推荐，最稳定）或镜像加速
  2. **代理地址**（代理模式）— 默认 `127.0.0.1:7890`
  3. **镜像站地址**（镜像模式）— 或让脚本运行时显示推荐列表
  4. **目标架构** — `amd64`（x86 服务器，默认）或 `arm64v8`（ARM 服务器）
- 若 `arch` 已有值，跳过引导，直接使用该配置

`script_dir` 自动解析为技能自带的 `scripts/` 目录。

### config.json 结构

```json
{
  "mode": "proxy",
  "proxy_address": "127.0.0.1:7890",
  "mirror_url": "",
  "arch": "",
  "script_dir": "",
  "version": 1
}
```

`arch` 为空时触发首次引导。

## 执行流程

### 1. 读取配置，构建命令（安全执行）

读取 `config.json`，根据 mode 构建命令。使用 `exec` 的 `shell=false`（参数数组）方式调用，避免 shell 注入。

**代理模式：**
```python
exec(
  command="python3 docker_image_puller.py -i '<image>' --socks5 --socks5-proxy '<proxy>' -a '<arch>'",
  workdir="<script_dir>"
)
```

**镜像加速模式：**
```python
exec(
  command="printf 'y\\ny\\n<mirror>' | python3 docker_image_puller.py -i '<image>' -a '<arch>'",
  workdir="<script_dir>"
)
```

> ⚠️ 镜像名必须为合法 Docker 镜像引用（仅含字母、数字、`/`、`:`、`-`、`.`、`_`），包含其他字符时先向用户确认。

### 2. Sub-Agent 后台下载

使用 `sessions_spawn` 启动隔离子任务，不阻塞主会话：

```
sessions_spawn(
  task="读取 <skill-dir>/config.json 获取配置。为镜像 '<镜像名>' 构建下载命令。用 exec 执行（background=true, timeout=600）。每 30 秒用 process 轮询进度。完成后报告 tar 路径和 docker load 命令。失败则报告具体原因。",
  mode="run",
  runtime="subagent",
  timeoutSeconds=900
)
```

立即回复用户：
> 📥 已启动后台下载 `<镜像名>`（架构：<架构>）... 完成后会通知你，可继续其他操作。

### 3. 结果报告

| 结果 | 处理方式 |
|------|---------|
| ✅ 成功 | 报告 tar 文件路径 + `docker load -i <路径>` |
| ⏱ 超时 | "下载超时，请检查网络或代理" |
| 🔒 认证失败 401 | 请用户提供仓库用户名/密码 |
| 🌐 网络错误 | 报告具体 HTTP 错误码和失败 URL |
| 💾 磁盘不足 | 提醒用户清理磁盘空间 |

## 补充说明

- **安全**：脚本启用 HTTPS 证书校验（`verify=True`），不再禁用 TLS 验证。执行镜像下载时使用参数数组而非 shell 拼接，防止命令注入。
- 输出路径：`<script_dir>/images/<仓库>_<标签>_<架构>.tar`
- 脚本运行完毕后自动清理 `tmp/` 临时目录，无需手动处理
- `config.json` 跨次复用，用户可随时要求切换下载模式或指定架构

_meta.json

{
  "ownerId": "kn708zphbthck6epdfhqrap4xd8293d5",
  "slug": "docker-image-puller",
  "version": "1.3.1",
  "publishedAt": 1785995937254
}

skill-card.md

## Description:

Downloads Docker images from registries and packages them as tar files for offline docker load use, with SOCKS5 proxy and mirror-based download modes.

This skill is ready for commercial/non-commercial use.

## Publisher:

[zhaohaixin](https://clawhub.ai/user/zhaohaixin)

### License/Terms of Use:

MIT-0

## Use Case:

Developers and operations engineers use this skill to fetch Docker images for offline transfer or environments where direct docker pull access is unreliable. It helps configure proxy or mirror download settings, choose a target architecture, run the pull workflow, and report the generated tar path and docker load command.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: Registry credentials or private registry details could be exposed through command-line arguments or debug output.

Mitigation: Avoid passing registry passwords on the command line and avoid debug mode when working with private registries.

Risk: Downloaded image content may be untrusted or altered before it is loaded into Docker.

Mitigation: Verify downloaded images independently before loading or running them.

Risk: Mirror-mode execution uses shell-style pipelines with configuration-derived values.

Mitigation: Review or update the mirror-mode execution path so it avoids shell pipelines with interpolated configuration.

## Reference(s):

- [ClawHub skill page](https://clawhub.ai/zhaohaixin/skills/docker-image-puller)

## Skill Output:

**Output Type(s):** [text, markdown, shell commands, configuration, files, guidance]

**Output Format:** [Markdown or plain text status reports with inline shell commands and generated Docker image tar paths]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [Successful runs produce Docker image tar archives intended for docker load.]

## Skill Version(s):

1.3.1 (source: ClawHub release evidence)

## Ethical Considerations:

Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.

config.json

{
  "mode": "proxy",
  "proxy_address": "127.0.0.1:7890",
  "mirror_url": "",
  "arch": "",
  "script_dir": "/Users/zhao/.openclaw/workspace/skills/docker-image-puller/scripts",
  "version": 1
}

Github ReposUpdated 2d agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW

Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW

Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.