{"id":"8ec85dc5-76d9-40cb-ba03-f50751473974","entityType":"agent","slug":"clawhub-skills-adshrc-devboxes","name":"devboxes","canonicalUrl":"https://www.xpersona.co/agent/clawhub-skills-adshrc-devboxes","canonicalPath":"/agent/clawhub-skills-adshrc-devboxes","generatedAt":"2026-10-09T17:10:20.466Z","source":"CLAWHUB","claimStatus":"UNCLAIMED","verificationTier":"NONE","summary":{"evidence":{"source":"editorial-content","verified":true,"confidence":"high","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":null},"description":"Manage development environment containers (devboxes) with web-accessible VSCode, VNC, and app routing via Traefik or Cloudflare Tunnels. Use when the user asks to create, start, stop, list, or manage devboxes/dev environments, spin up a development container, set up a coding sandbox, or configure the devbox infrastructure for the first time (onboarding). --- name: devboxes description: Manage development environment containers (devboxes) with web-accessible VSCode, VNC, and app routing via Traefik or Cloudflare Tunnels. Use when the user asks to create, start, stop, list, or manage devboxes/dev environments, spin up a development container, set up a coding sandbox, or configure the devbox infrastructure for the first time (onboarding). --- Devbox Skill Devboxes are O","descriptionLabel":"Technical summary","evidenceSummary":"Capability contract not published. No trust telemetry is available yet. Last updated 4/15/2026.","installCommand":"clawhub skill install skills:adshrc:devboxes","sourceUrl":"https://github.com/openclaw/skills/tree/main/skills/adshrc/devboxes","homepage":null,"primaryLinks":[{"label":"View on ClawHub","url":"https://github.com/openclaw/skills/tree/main/skills/adshrc/devboxes","kind":"source"}],"safetyScore":84,"overallRank":62,"popularityScore":50,"trustScore":null,"claimedByName":null,"isOwner":false,"seoDescription":"Manage development environment containers (devboxes) with web-accessible VSCode, VNC, and app routing via Traefik or Cloudflare Tunnels. Use when the user asks "},"coverage":{"evidence":{"source":"public-profile","verified":false,"confidence":"medium","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":null},"protocols":[{"protocol":"OPENCLEW","label":"OpenClaw","status":"self-declared","notes":"Declared in the public agent profile."}],"capabilities":[{"label":"only","status":"self-declared"},{"label":"work","status":"self-declared"},{"label":"ask","status":"self-declared"},{"label":"create","status":"self-declared"},{"label":"be","status":"self-declared"},{"label":"use","status":"self-declared"},{"label":"include","status":"self-declared"}],"verifiedCount":0,"selfDeclaredCount":8,"capabilityMatrix":{"rows":[{"key":"OPENCLEW","type":"protocol","support":"unknown","confidenceSource":"profile","notes":"Listed on profile"},{"key":"only","type":"capability","support":"supported","confidenceSource":"profile","notes":"Declared in agent profile metadata"},{"key":"work","type":"capability","support":"supported","confidenceSource":"profile","notes":"Declared in agent profile metadata"},{"key":"ask","type":"capability","support":"supported","confidenceSource":"profile","notes":"Declared in agent profile metadata"},{"key":"create","type":"capability","support":"supported","confidenceSource":"profile","notes":"Declared in agent profile metadata"},{"key":"be","type":"capability","support":"supported","confidenceSource":"profile","notes":"Declared in agent profile metadata"},{"key":"use","type":"capability","support":"supported","confidenceSource":"profile","notes":"Declared in agent profile metadata"},{"key":"include","type":"capability","support":"supported","confidenceSource":"profile","notes":"Declared in agent profile metadata"}],"flattenedTokens":"protocol:OPENCLEW|unknown|profile capability:only|supported|profile capability:work|supported|profile capability:ask|supported|profile capability:create|supported|profile capability:be|supported|profile capability:use|supported|profile capability:include|supported|profile"}},"adoption":{"evidence":{"source":"no-adoption-signals","verified":false,"confidence":"low","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":"No source adoption metrics were available."},"stars":null,"forks":null,"downloads":null,"packageName":null,"latestVersion":null,"tractionLabel":null},"release":{"evidence":{"source":"agent-index","verified":false,"confidence":"medium","updatedAt":"2026-02-25T05:56:21.082Z","emptyReason":null},"lastUpdatedAt":"2026-04-15T00:45:39.800Z","lastCrawledAt":"2026-02-25T05:56:21.082Z","lastIndexedAt":null,"nextCrawlAt":"2026-02-26T05:56:21.082Z","lastVerifiedAt":null,"highlights":[]},"execution":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No published capability contract is available yet."},"installCommand":"clawhub skill install skills:adshrc:devboxes","setupComplexity":"low","setupSteps":["Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.","Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data."],"contract":{"contractStatus":"missing","authModes":[],"requires":[],"forbidden":[],"supportsMcp":false,"supportsA2a":false,"supportsStreaming":false,"inputSchemaRef":null,"outputSchemaRef":null,"dataRegion":null,"contractUpdatedAt":null,"sourceUpdatedAt":null,"freshnessSeconds":null},"invocationGuide":{"preferredApi":{"snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-adshrc-devboxes/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-adshrc-devboxes/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-adshrc-devboxes/trust"},"curlExamples":["curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-skills-adshrc-devboxes/snapshot\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-skills-adshrc-devboxes/contract\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-skills-adshrc-devboxes/trust\""],"jsonRequestTemplate":{"query":"summarize this repo","constraints":{"maxLatencyMs":2000,"protocolPreference":["OPENCLEW"]}},"jsonResponseTemplate":{"ok":true,"result":{"summary":"...","confidence":0.9},"meta":{"source":"CLAWHUB","generatedAt":"2026-10-09T17:10:20.465Z"}},"retryPolicy":{"maxAttempts":3,"backoffMs":[500,1500,3500],"retryableConditions":["HTTP_429","HTTP_503","NETWORK_TIMEOUT"]}},"endpoints":{"dossierUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-adshrc-devboxes/dossier","snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-adshrc-devboxes/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-adshrc-devboxes/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-adshrc-devboxes/trust"}},"reliability":{"evidence":{"source":"runtime-metrics","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No trust, reliability, or runtime telemetry is available."},"trust":{"status":"unavailable","handshakeStatus":"UNKNOWN","verificationFreshnessHours":null,"reputationScore":null,"p95LatencyMs":null,"successRate30d":null,"fallbackRate":null,"attempts30d":null,"trustUpdatedAt":null,"trustConfidence":"unknown","sourceUpdatedAt":null,"freshnessSeconds":null},"decisionGuardrails":{"doNotUseIf":["Contract metadata is missing or unavailable for deterministic execution."],"safeUseWhen":[],"riskFlags":["missing_or_unavailable_contract","trust_data_unavailable","schema_references_missing"],"operationalConfidence":"low"},"executionMetrics":{"observedLatencyMsP50":null,"observedLatencyMsP95":null,"estimatedCostUsd":null,"uptime30d":null,"rateLimitRpm":null,"rateLimitBurst":null,"lastVerifiedAt":null,"verificationSource":null},"runtimeMetrics":{"successRate":null,"avgLatencyMs":null,"avgCostUsd":null,"hallucinationRate":null,"retryRate":null,"disputeRate":null,"p50Latency":null,"p95Latency":null,"lastUpdated":null}},"benchmarks":{"evidence":{"source":"no-benchmark-data","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No benchmark suites or observed failure patterns are available."},"suites":[],"failurePatterns":[]},"artifacts":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"high","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":null},"readme":"---\nname: devboxes\ndescription: Manage development environment containers (devboxes) with web-accessible VSCode, VNC, and app routing via Traefik or Cloudflare Tunnels. Use when the user asks to create, start, stop, list, or manage devboxes/dev environments, spin up a development container, set up a coding sandbox, or configure the devbox infrastructure for the first time (onboarding).\n---\n\n# Devbox Skill\n\nDevboxes are OpenClaw sandbox containers running a custom image with VSCode Web, noVNC, Chromium (CDP), and up to 5 app ports routed via **Traefik** or **Cloudflare Tunnels**.\n\nOpenClaw manages the full container lifecycle. The **main agent** assigns each devbox a sequential ID by maintaining a local counter file, then passes `DEVBOX_ID` to the subagent task. The entrypoint uses this ID to write Traefik routes and build `APP_URL_*` env vars.\n\n## File Locations\n\nResolve paths relative to this SKILL.md's parent directory.\n\nKey files:\n\n- `references/setup-script-guide.md` — conventions for project setup scripts (`.openclaw/setup.sh`)\n\n## Architecture\n\n- **Agent id:** `devbox` (configured in openclaw.json)\n- **Sandbox mode:** `all` / `scope: session` — one container per session\n- **Image:** `ghcr.io/adshrc/openclaw-devbox:latest` (pulled from GHCR)\n- **Network:** `traefik` (for Traefik routing) or default Docker network (for Cloudflare Tunnel routing)\n- **Browser:** `sandbox.browser.enabled: true`, CDP on port 9222\n\n### ID Assignment\n\nThe **main agent** manages the devbox counter:\n\n1. Reads and increments `/home/node/.openclaw/.devbox-counter` before spawning\n2. Passes the assigned `DEVBOX_ID` to the devbox agent via the task description\n3. The devbox agent must `export DEVBOX_ID={id}` as the very first action\n\n### Entrypoint\n\nThe container's entrypoint expects `DEVBOX_ID` to already be set as an environment variable and then:\n\n1. Builds `APP_URL_1..5`, `VSCODE_URL`, `NOVNC_URL` from tags + domain + ID\n2. Writes `/etc/devbox.env` and `/etc/profile.d/devbox.sh` (available in all shells)\n3. Routes based on `ROUTING_MODE`:\n   - **`traefik`** (default): Writes Traefik config to `/traefik/devbox-{id}.yml`\n   - **`cloudflared`**: Generates cloudflared ingress config, registers DNS CNAME records via CF API, starts `cloudflared tunnel run`\n\n### Bind Mounts (configured in openclaw.json)\n\n| Agent path                     | Devbox container path | Purpose                                       |\n| ------------------------------ | --------------------- | --------------------------------------------- |\n| `/home/node/.openclaw/traefik` | `/traefik`            | Route configs (only if using Traefik routing) |\n\n**Important:** Due to OpenClaw Security measures, all user capabilites are dropped by default. So even root (in the devbox) has no write access to bind mounts, and can only read from them. The only solution currently is `chmod 777` on the host path that is mapped to `/home/node/.openclaw/traefik`.\n\n### Known Paths\n\nThese paths are always the same inside the OpenClaw container:\n\n- **OpenClaw data:** `/home/node/.openclaw`\n- **Traefik dynamic config:** `/home/node/.openclaw/traefik` (must be mounted into the OpenClaw container; only if using Traefik routing)\n\n## Onboarding Flow\n\n**Important:** After this skill is installed, the next step MUST be this onboarding flow. The user CANNOT use the devboxes skill until the onboarding flow is completed and the infrastructure is set up.\n\n**Important:** This runs on the MAIN agent, NOT in a sandbox. The main agent has access to `exec`, `gateway`, and the file system.\n\nWhen the user asks to set up the devbox skill, do the following:\n\n### Step 1: Verify Docker Access\n\nVerify that you have access to the Docker socket and Docker binary:\n\n```bash\nwhich docker\ndocker version\n```\n\nIf not, abort here and tell the user they need to run the OpenClaw container with:\n\n```\n-v /usr/bin/docker:/usr/bin/docker:ro\n-v /var/run/docker.sock:/var/run/docker.sock\n```\n\nand that they need to set `chmod 666 /var/run/docker.sock` manually on the host, so that the OpenClaw container can work with it.\n\nThe OpenClaw container needs to be restarted then. After that, they can ask to set up the devbox skill again.\n\n### Step 2: Gather configuration info\n\nAsk the user for:\n\n- **Routing mode**: Traefik or Cloudflare Tunnel?\n- **Domain**: with wildcard A-Record pointing to the server (e.g. `*.example.com`)\n- **GitHub token** (optional): for cloning private repos inside devboxes\n\nIf **Cloudflare Tunnel** is chosen, also ask for:\n\n- **Cloudflare API token**: must have permissions for the zone (DNS edit + Tunnel edit)\n\n### Step 3: Validate the Host Mapping Path (ONLY if using Traefik routing, skip otherwise!)\n\nFind out what the host path/mapping is for `/home/node/.openclaw` inside the container:\n\n```bash\n# Returns the host path that is mapped to /home/node/.openclaw inside the container\ndocker inspect --format='{{range .Mounts}}{{if eq .Destination \"/home/node/.openclaw\"}}{{.Source}}{{end}}{{end}}' $(hostname)\n```\n\nStore the value as `HOST_OPENCLAW_PATH`. If `HOST_OPENCLAW_PATH` is a \"system directory\", OpenClaw will not be able to spawn a devbox.\n\nSystem directories are: /etc, /private/etc, /proc, /sys, /dev, /root, /boot, /run, /var/run, /private/var/run, /var/run/docker.sock, /private/var/run/docker.sock and /run/docker.sock.\n\nIf the `HOST_OPENCLAW_PATH` is such a \"system directory\", abort here and tell the user they need to change their OpenClaw container setup to use a host path for OpenClaw data that is not a system directory. For example, they can create a directory like `/home/openclaw` or `/opt/openclaw` on the host.\n\n### Step 4: Verify Routing prerequisites\n\n#### If routing mode is Traefik:\n\nCheck that /home/node/.openclaw/traefik is mounted:\n\n```bash\nls /home/node/.openclaw/traefik\n```\n\nIf `/home/node/.openclaw/traefik` doesn't exist, abort here and tell the user they need to add e.g. `-v path_to_traefik:/home/node/.openclaw/traefik` to their OpenClaw container and restart it. Remind the user that they cannot use system directories for the host path (OpenClaw Sandboxes restriction). After that, a container restart is needed, and then they can ask to set up the devbox skill again.\n\n#### If routing mode is Cloudflare Tunnel:\n\nValidate the CF API token and domain:\n\n```bash\n# 1. Get zone ID for the domain (extract root domain from the provided domain)\ncurl -s -X GET \"https://api.cloudflare.com/client/v4/zones?name=${ROOT_DOMAIN}\" \\\n  -H \"Authorization: Bearer ${CF_API_TOKEN}\" | jq .\n\n# 2. Get account ID from the zone response\n# account_id = .result[0].account.id\n# zone_id = .result[0].id\n```\n\nThen create the tunnel:\n\n```bash\n# 4. Create a named tunnel\ncurl -s -X POST \"https://api.cloudflare.com/client/v4/accounts/${CF_ACCOUNT_ID}/cfd_tunnel\" \\\n  -H \"Authorization: Bearer ${CF_API_TOKEN}\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"name\": \"devboxes@'\"$(hostname)\"'\", \"config_src\": \"local\", \"tunnel_secret\": \"'$(openssl rand -base64 32)'\"}' | jq .\n\n# Extract tunnel_id and tunnel_token from the response\n# tunnel_id = .result.id\n# tunnel_token = .result.token\n```\n\nStore the values: `CF_API_TOKEN`, `CF_ZONE_ID`, `CF_ACCOUNT_ID`, `CF_TUNNEL_ID`, `CF_TUNNEL_TOKEN`.\n\n### Step 5: Create counter file\n\n```bash\necho \"0\" > /home/node/.openclaw/.devbox-counter\n```\n\n**Important:** The counter file is managed by the main agent only. The counter CANNOT be reset, or decremented, only increment is allowed!\n\n### Step 6: Configure OpenClaw\n\nFirst, check the current agents config:\n\n```bash\nnode /app/openclaw.mjs config get agents\n```\n\nThen, decide what needs to be adjusted based on the existing config:\n\n#### Main Agent\n\nIf there is an agent with `default: true`, note its index and add `subagents.allowAgents` to it:\n\n```bash\nnode /app/openclaw.mjs config set agents.list[{index}].subagents.allowAgents '[\"devbox\"]' --json\n```\n\nthen (if needed), set sandbox mode to `off` (since the main agent doesn't need a sandbox):\n\n```bash\nnode /app/openclaw.mjs config set agents.list[{index}].sandbox.mode \"off\"\n```\n\nelse, if there's no agent with `default: true`, create one at the next index with the necessary structure:\n\n```bash\nnode /app/openclaw.mjs config set agents.list[{index}] '{\n  \"id\": \"main\",\n  \"default\": true,\n  \"subagents\": {\n    \"allowAgents\": [\n        \"devbox\"\n    ]\n  },\n  \"sandbox\": {\n    \"mode\": \"off\"\n  }\n}' --json\n```\n\n#### Devbox Agent\n\n1. Pull the Docker image so that it's available when OpenClaw tries to spawn it:\n\n```bash\ndocker pull ghcr.io/adshrc/openclaw-devbox:latest\n```\n\n2. Add the devbox agent at the next index in agents.list. Adjust the sandbox and docker config as needed (replace placeholders in curly brackets):\n\n```bash\nnode /app/openclaw.mjs config set agents.list[{index}] '{\n    \"id\": \"devbox\",\n    \"name\": \"Devbox Agent\",\n    \"sandbox\": {\n      \"mode\": \"all\",\n      \"workspaceAccess\": \"none\",\n      \"scope\": \"session\",\n      \"docker\": {\n        \"image\": \"ghcr.io/adshrc/openclaw-devbox:latest\",\n        \"readOnlyRoot\": false,\n        \"network\": \"traefik\", # Only needed for Traefik routing mode, exclude otherwise\n        \"env\": {\n          \"ENABLE_VNC\": \"true\",\n          \"ENABLE_VSCODE\": \"true\",\n          \"DEVBOX_DOMAIN\": \"{domain}\",\n          \"APP_TAG_1\": \"app1\",\n          \"APP_TAG_2\": \"app2\",\n          \"APP_TAG_3\": \"app3\",\n          \"APP_TAG_4\": \"app4\",\n          \"APP_TAG_5\": \"app5\",\n          \"GITHUB_TOKEN\": \"{github_token}\",\n          \"ROUTING_MODE\": \"{traefik|cloudflared}\",\n          # Cloudflare Tunnel variables (only needed if using cloudflared routing, exclude otherwise)\n          \"CF_TUNNEL_TOKEN\": \"{cf_tunnel_token}\",\n          \"CF_API_TOKEN\": \"{cf_api_token}\",\n          \"CF_ZONE_ID\": \"{cf_zone_id}\",\n          \"CF_TUNNEL_ID\": \"{cf_tunnel_id}\",\n        },\n        \"binds\": [\n          \"{host_openclaw_path}/traefik:/traefik:rw\" # Only needed for Traefik routing mode, exclude otherwise\n        ]\n      },\n      \"browser\": {\n        \"enabled\": true,\n        \"cdpPort\": 9222\n      },\n      \"prune\": {\n        \"idleHours\": 0,\n        \"maxAgeDays\": 0\n      }\n    }\n  }\n]' --json\n```\n\n3. Allow Agents to communicate with each other so that subsequent tasks can be sent to the devbox agent:\n\n```bash\nnode /app/openclaw.mjs config set tools.agentToAgent.enabled true\nnode /app/openclaw.mjs config set tools.sessions.visibility \"all\"\n```\n\nAfter this is done, restart the gateway to apply the changes. If this is not working (e.g. command is disabled), ask the user to restart the OpenClaw container manually.\n\n## Workflow: Spawn a Devbox\n\n### Step 1: Assign ID (main agent)\n\nRead and increment the counter file:\n\n```bash\nDEVBOX_ID=$(( $(cat /home/node/.openclaw/.devbox-counter) + 1 ))\necho \"$DEVBOX_ID\" > /home/node/.openclaw/.devbox-counter\n```\n\n### Step 2: Spawn subagent (main agent)\n\nUse `devbox-<id>` as the label and include the `DEVBOX_ID` in the task:\n\n```python\nsessions_spawn(\n    agentId=\"devbox\",\n    label=f\"devbox-{DEVBOX_ID}\",\n    task=f\"Your task description. Your DEVBOX_ID is {DEVBOX_ID} — run `export DEVBOX_ID={DEVBOX_ID}` as your very first action before doing anything else. GitHub token is in $GITHUB_TOKEN. After exporting DEVBOX_ID, env vars (APP_URL_*, etc.) are in your shell via `source /etc/profile.d/devbox.sh`. ALWAYS use /workspace as the working directory! When cloning, the structure must be /workspace/<repo>.\"\n)\n```\n\n### Step 3: Report URLs to user (main agent)\n\nThe main agent already knows the assigned ID from Step 1. Report:\n\n- VSCode: `https://vscode-{DEVBOX_ID}.{domain}`\n- noVNC: `https://novnc-{DEVBOX_ID}.{domain}/vnc.html`\n- App URLs: `https://{tag}-{DEVBOX_ID}.{domain}`\n\n### Cleanup\n\nOpenClaw manages container lifecycle — containers are removed when sessions end. Traefik route configs left behind are harmless.\n\n## Environment Variables\n\n### Static (set in openclaw.json sandbox.docker.env)\n\n| Variable          | Example                    | Description                                          |\n| ----------------- | -------------------------- | ---------------------------------------------------- |\n| `ROUTING_MODE`    | `traefik` or `cloudflared` | Routing backend (default: `traefik`)                 |\n| `GITHUB_TOKEN`    | `ghp_...`                  | GitHub PAT for cloning                               |\n| `DEVBOX_DOMAIN`   | `example.com`              | Base domain                                          |\n| `APP_TAG_1..5`    | `app1`, `app2`, ...        | Route tags                                           |\n| `ENABLE_VNC`      | `true`                     | Enable noVNC                                         |\n| `ENABLE_VSCODE`   | `true`                     | Enable VSCode Web                                    |\n| `CF_TUNNEL_TOKEN` | `eyJ...`                   | Cloudflare tunnel run token (cloudflared only)       |\n| `CF_API_TOKEN`    | `abc123`                   | CF API token for DNS registration (cloudflared only) |\n| `CF_ZONE_ID`      | `xyz789`                   | CF zone ID for the domain (cloudflared only)         |\n| `CF_TUNNEL_ID`    | `uuid`                     | CF tunnel ID for CNAME targets (cloudflared only)    |\n\n### Dynamic (built by entrypoint, available in all shells)\n\n| Variable        | Example                                | Description                 |\n| --------------- | -------------------------------------- | --------------------------- |\n| `DEVBOX_ID`     | `1`                                    | Auto-assigned sequential ID |\n| `APP_URL_1..5`  | `https://app1-1.example.com`           | Full URLs per app slot      |\n| `APP_PORT_1..5` | `8003..8007`                           | Internal ports              |\n| `VSCODE_URL`    | `https://vscode-1.example.com`         | VSCode Web URL              |\n| `NOVNC_URL`     | `https://novnc-1.example.com/vnc.html` | noVNC URL                   |\n\n### Ports\n\n| Port      | Service                        |\n| --------- | ------------------------------ |\n| 8000      | VSCode Web                     |\n| 8002      | noVNC                          |\n| 9222      | Chrome DevTools Protocol (CDP) |\n| 8003-8007 | App slots 1-5                  |\n\n## Browser\n\nThe devbox agent has browser access via Chromium CDP (port 9222). The subagent can use the `browser` tool to navigate, screenshot, and interact with apps running inside the container (use `http://localhost:{port}`).\n\n## Project Setup Scripts\n\nProjects can include `.openclaw/setup.sh` that runs inside the devbox. It has access to all env vars (`APP_URL_*`, `APP_PORT_*`, `DEVBOX_ID`, etc.) via `/etc/profile.d/devbox.sh`.\n\nSee `references/setup-script-guide.md` for conventions.\n","readmeExcerpt":"--- name: devboxes description: Manage development environment containers (devboxes) with web-accessible VSCode, VNC, and app routing via Traefik or Cloudflare Tunnels. Use when the user asks to create, start, stop, list, or manage devboxes/dev environments, spin up a development container, set up a coding sandbox, or configure the devbox infrastructure for the first time (onboarding). --- Devbox Skill Devboxes are O","codeSnippets":[],"executableExamples":[{"language":"bash","snippet":"which docker\ndocker version"},{"language":"text","snippet":"-v /usr/bin/docker:/usr/bin/docker:ro\n-v /var/run/docker.sock:/var/run/docker.sock"},{"language":"bash","snippet":"# Returns the host path that is mapped to /home/node/.openclaw inside the container\ndocker inspect --format='{{range .Mounts}}{{if eq .Destination \"/home/node/.openclaw\"}}{{.Source}}{{end}}{{end}}' $(hostname)"},{"language":"bash","snippet":"ls /home/node/.openclaw/traefik"},{"language":"bash","snippet":"curl -s -X GET \"https://api.cloudflare.com/client/v4/zones?name=${ROOT_DOMAIN}\" \\\n  -H \"Authorization: Bearer ${CF_API_TOKEN}\" | jq ."},{"language":"bash","snippet":"# 1. Get zone ID for the domain (extract root domain from the provided domain)\ncurl -s -X GET \"https://api.cloudflare.com/client/v4/zones?name=${ROOT_DOMAIN}\" \\\n  -H \"Authorization: Bearer ${CF_API_TOKEN}\" | jq .\n\n# 2. Get account ID from the zone response\n# account_id = .result[0].account.id\n# zone_id = .result[0].id"}],"parameters":{},"dependencies":[],"permissions":[],"extractedFiles":[],"languages":["typescript"],"docsSourceLabel":"CLAWHUB","editorialOverview":"Manage development environment containers (devboxes) with web-accessible VSCode, VNC, and app routing via Traefik or Cloudflare Tunnels. Use when the user asks to create, start, stop, list, or manage devboxes/dev environments, spin up a development container, set up a coding sandbox, or configure the devbox infrastructure for the first time (onboarding). --- name: devboxes description: Manage development environment containers (devboxes) with web-accessible VSCode, VNC, and app routing via Traefik or Cloudflare Tunnels. Use when the user asks to create, start, stop, list, or manage devboxes/dev environments, spin up a development container, set up a coding sandbox, or configure the devbox infrastructure for the first time (onboarding). --- Devbox Skill Devboxes are O","editorialQuality":{"score":100,"threshold":65,"status":"ready","wordCount":401,"uniquenessScore":62,"reasons":[]}},"media":{"evidence":{"source":"no-media","verified":false,"confidence":"low","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":"No screenshots, media assets, or demo links are available."},"primaryImageUrl":null,"mediaAssetCount":0,"assets":[],"demoUrl":null},"ownerResources":{"evidence":{"source":"unclaimed","verified":false,"confidence":"low","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":"This page has not been claimed by the agent owner."},"hasCustomPage":false,"customPageUpdatedAt":null,"customLinks":[],"structuredLinks":{"docsUrl":null,"demoUrl":null,"supportUrl":null,"pricingUrl":null,"statusUrl":null},"customPage":null},"relatedAgents":{"evidence":{"source":"protocol-neighbors","verified":false,"confidence":"medium","updatedAt":"2026-10-09T17:10:20.466Z","emptyReason":null},"items":[{"id":"b917f68a-ebff-438e-84f8-3f4b2494c0bc","entityType":"agent","canonicalPath":"/agent/activepieces-activepieces","slug":"activepieces-activepieces","name":"activepieces","description":"AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents","url":"https://github.com/activepieces/activepieces","homepage":"https://www.activepieces.com","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-15T02:22:12.426Z","createdAt":"2026-02-25T03:38:12.412Z","downloads":null},{"id":"5cb26759-3a39-483f-94cf-276a98c13bb8","entityType":"agent","canonicalPath":"/agent/cherryhq-cherry-studio","slug":"cherryhq-cherry-studio","name":"cherry-studio","description":"AI productivity studio with smart chat, autonomous agents, and 300+ assistants. Unified access to frontier LLMs","url":"https://github.com/CherryHQ/cherry-studio","homepage":"https://cherry-ai.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-11T14:38:40.986Z","createdAt":"2026-02-25T03:38:19.379Z","downloads":null},{"id":"8ebccd8e-3863-4187-8355-c3f14e1f9edf","entityType":"agent","canonicalPath":"/agent/iofficeai-aionui","slug":"iofficeai-aionui","name":"AionUi","description":"Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!","url":"https://github.com/iOfficeAI/AionUi","homepage":"https://www.aionui.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-10T18:48:31.762Z","createdAt":"2026-02-25T03:38:16.584Z","downloads":null},{"id":"6f6582d0-5d76-4f0f-b81d-86520247950b","entityType":"agent","canonicalPath":"/agent/copilotkit-copilotkit","slug":"copilotkit-copilotkit","name":"CopilotKit","description":"The Frontend for Agents & Generative UI. React + Angular","url":"https://github.com/CopilotKit/CopilotKit","homepage":"https://docs.copilotkit.ai","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-03-25T09:50:57.846Z","createdAt":"2026-02-25T03:39:14.617Z","downloads":null}],"links":{"hub":"/agent","source":"/agent/source/clawhub","protocols":[{"label":"OpenClaw","href":"/agent/protocol/openclew"}]}}}