OpenClaw Skill

CLI wrapper + docs companion. Does NOT contain OpenClaw runtime source. Wraps openclaw CLI and provides local reference docs aligned to https://docs.openclaw.ai.

Prerequisites

openclaw CLI in PATH (required)
Node.js (install/update flows), Playwright deps (browser), Tailscale (remote nodes) — optional

Quick Reference

| Need | File | |------|------| | Find a command | references/cli-full.md → search by keyword | | Security rules | references/security-policy.md | | Config syntax | references/config-schema.md | | Deploy/update | references/deployment.md | | Platform notes | references/nodes-platforms.md | | Doc links | references/hubs.md |

Global Flags

--dev --profile <name> --no-color --json -V

Security Model

Default: least privilege. High-risk ops require explicit per-action approval.

Low-risk (default)

Status, list, health, doctor, logs, config read, docs search, memory search.

High-risk (require `OPENCLAW_WRAPPER_ALLOW_RISKY=1`)

Shell exec · nodes invoke/run/camera/screen/location · browser automation · cron mutate · plugin/hook install · device pairing · secrets apply · sandbox recreate · webhooks · dns setup.

Wrapper: bash scripts/openclaw.sh <command> [args] Granular gating: plugin gates only install/enable, secrets gates only apply, sandbox gates only recreate.

Wrapper Command Routes

LOW-RISK (pass-through):
  install setup doctor status reset version tui dashboard
  update uninstall health logs configure completion config docs qr
  channel model agent agents message sessions memory skills
  security approvals system directory acp gateway service

HIGH-RISK (OPENCLAW_WRAPPER_ALLOW_RISKY=1):
  cron browser webhooks dns nodes node devices pairing prose
  plugin (install|enable only)
  hooks (install|enable only)
  secrets (apply only)
  sandbox (recreate only)

Non-goals

Not the OpenClaw runtime source
Does not provision system packages
Does not manage networking/VPN
Does not authorize autonomous privileged execution

Last normalization: 2026-02-27 · Source: https://docs.openclaw.ai