#645 by GitHub stars

openclaw/crabbox

Crabbox: warm a box, sync the diff, run the suite.

History

Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.

View weekly changes

skills/crabbox/SKILL.md

Week of Nov 2, 2026 · +7 / −8 lines

Before Network or broad shell → After Network or broad shell

c41270ea7e60 → cc85831dfe9f

- 209 `hyperv` needs a Generation 2 VHDX, DHCP, and a known local administrator
- 210 password in trusted config or `CRABBOX_HYPERV_GUEST_PASSWORD`. It installs
- 211 pinned, verified OpenSSH and MinGit packages when missing, using PowerShell
- 212 Direct. See `docs/providers/hyperv.md` for template and lifecycle details.
- 213 
- 214 For provider testing, prefer an elevated headless runner; early PowerShell
- 215 Direct failures can show credential UI. Keep passwords out of arguments and
- 216 logs, and verify the lease becomes ready, runs over SSH, and releases.
+ 209 `hyperv` is a direct Windows-hosted `ssh-lease`/`local-vm` provider for native Windows Generation 2 VHDXs; it supports SSH/sync, pause/resume, cleanup, guarded checkpoint `fork`/`restore` (`crabbox checkpoint`), and `--desktop` with WebVNC/screenshots (`crabbox desktop proof`). See `docs/providers/hyperv.md`.
+ 210 
+ 211 Needs DHCP plus a known local administrator password from trusted user config or `CRABBOX_HYPERV_GUEST_PASSWORD` (never argv/repo/logs); PowerShell Direct bootstraps OpenSSH/MinGit. Run with Hyper-V VM/storage permissions as the invoking interactive user, never as `LocalSystem`; local `Hyper-V Administrators` membership suffices without elevation. Host session 0 is only an unattended-host convenience against PowerShell Direct credential UI and diverges profile, `PATH`, and SSH known-hosts. Doctor is non-mutating inventory/feature proof only: it does not boot the image or validate credentials. Pause uses `Save-VM`.
+ 212 
+ 213 Windows proof: `crabbox doctor --provider hyperv --target windows --hyperv-image 'C:\Images\windows-template.vhdx'`, then `crabbox warmup --provider hyperv --target windows --hyperv-image 'C:\Images\windows-template.vhdx' --slug hyperv-win-smoke --timing-json`, `crabbox status --provider hyperv --id hyperv-win-smoke --wait`, a no-sync command, and `crabbox stop --provider hyperv hyperv-win-smoke`.
+ 214 
+ 215 Exercise `pause`/`resume` and `cleanup --dry-run`. Expected blockers: host permissions, wrong image/generation, bad Windows credentials, or DHCP/internet. Destructive actions require an exact claim; explicitly `--reclaim` recovered VMs.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → c41270ea7e60

No earlier version was observed for comparison.

Compare on GitHub

skills/crabbox-quickstart/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

c41270ea7e60 → cc85831dfe9f

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → c41270ea7e60

No earlier version was observed for comparison.

Compare on GitHub

View on GitHubAdd to my skills

Verified commit cc85831dfe9ff647e163c1703e72404c2dabf1d0

git clone --filter=blob:none --no-checkout https://github.com/openclaw/crabbox.git .hotskills/openclaw-crabbox && git -C .hotskills/openclaw-crabbox checkout --detach cc85831dfe9ff647e163c1703e72404c2dabf1d0 # Copy each selected skill directory from .hotskills/openclaw-crabbox into .agents/skills/<skill-name>/
1.5kGitHub stars
7stars in 7 days
2skills in this repository
252commits in 30 days

Heat

5.9
  • Star growth, last 7 daysAhead of 70% of tracked repositories
  • Star growth, last 24 hoursAhead of 81% of tracked repositories
  • Rank movement, last 7 daysAhead of 30% of tracked repositories
  • Commits, last 30 daysAhead of 97% of tracked repositories
  • Accounts asking about it through MCP, last 7 daysNot available
  • Hot votes this weekAhead of 0% of tracked repositories

Heat never changes the order by stars, and sponsorship never touches it. How heat works

Stars over time

Aug 2, 2026Nov 7, 20261,520

Individual skills in this repository

How it works

crabbox

When your agent uses it

Detect and use Crabbox for repository tests and validation on remote runners. Use when crabbox.yaml or .crabbox.yaml exists, the crabbox CLI is available, or work needs remote compute, a clean or reusable environment, target-platform coverage, or auditable execution evidence.

What it loads into context

Frontmatter

67 tokens

Always available to the agent

SKILL.md

5,267 tokens

When the skill is activated

Reference documents

0 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

  1. Detect Crabbox
  2. Source Of Truth
  3. Auth And Config
  4. Choose The Remote Surface
  5. Common Remote Proof
  6. Sync And Fresh Checkouts
  7. Scripts, Shells, And Windows Targets
  8. Secrets And Environment Forwarding
  9. Profiles, Presets, Proof, And Results
  10. Run Handles And Observability
  11. Desktop, WebVNC, And UI Proof
  12. Provider Boundaries
  13. Local And Static Targets
  14. Useful Commands
  15. Failure Triage
  16. Cleanup

Scripts executed separately

  • ../../scripts/live-smoke.sh

Files

  • ../../scripts/live-smoke.shruns69,053 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
  • SKILL.mdcore20,515 bytes
Read SKILL.md

# Crabbox

Use Crabbox when a project needs remote proof, larger cloud capacity, a fresh
PR checkout, a reusable warmed box, GitHub Actions-style setup, durable run
logs/results, UI proof artifacts, or sync from a dirty local checkout.

## Detect Crabbox

- Treat repo-root `crabbox.yaml` or `.crabbox.yaml` as an intentional signal to
  use this skill for validation work. `.crabbox.yml` is not a supported config
  filename.
- If neither config exists, `command -v crabbox` still identifies an installed
  CLI. Run `crabbox doctor` before depending on it for remote work.
- Inspect config before executing it. Detection does not imply permission to
View the complete source on GitHub

Skills included

  • crabbox
  • crabbox-quickstart

Repository facts

License
MIT
Created
Apr 30, 2026
Last pushed
Nov 6, 2026
Forks
209
Open issues
49
Project activity
Active

Rank over the last 12 weeks

Now #645 · best #477 · down 85 in 30 days

  1. #632 on Oct 31
  2. #633 on Nov 1
  3. #636 on Nov 2
  4. #641 from Nov 3 to Nov 5
  5. #642 on Nov 6
  6. #645 since Nov 7
76 earlier periods
  1. #468 on Aug 2
  2. #473 on Aug 8
  3. #474 on Aug 9
  4. #494 on Aug 10
  5. #489 on Aug 11
  6. #486 on Aug 12
  7. #491 on Aug 13
  8. #493 on Aug 14
  9. #475 on Aug 15
  10. #481 on Aug 16
  11. #485 on Aug 17
  12. #496 on Aug 18
  13. #494 on Aug 19
  14. #493 on Aug 20
  15. #490 on Aug 21
  16. #477 on Aug 22
  17. #496 on Aug 23
  18. #504 on Aug 25
  19. #497 on Aug 26
  20. #509 on Aug 27
  21. #507 on Aug 28
  22. #495 on Aug 29
  23. #484 on Aug 30
  24. #506 on Aug 31
  25. #510 on Sep 1
  26. #505 on Sep 2
  27. #512 on Sep 3
  28. #498 on Sep 4
  29. #497 on Sep 5
  30. #507 on Sep 6
  31. #506 on Sep 7
  32. #521 on Sep 8
  33. #512 on Sep 9
  34. #515 on Sep 10
  35. #510 on Sep 11
  36. #505 on Sep 12
  37. #504 on Sep 13
  38. #520 on Sep 14
  39. #513 on Sep 15
  40. #526 on Sep 16
  41. #521 on Sep 17
  42. #524 on Sep 18
  43. #509 on Sep 19
  44. #522 from Sep 20 to Sep 21
  45. #529 on Sep 22
  46. #522 on Sep 23
  47. #512 on Sep 24
  48. #508 on Sep 26
  49. #526 on Sep 27
  50. #528 on Sep 28
  51. #544 on Sep 29
  52. #534 on Sep 30
  53. #530 on Oct 2
  54. #521 on Oct 3
  55. #517 on Oct 4
  56. #528 on Oct 5
  57. #540 on Oct 6
  58. #544 on Oct 7
  59. #560 on Oct 8
  60. #559 on Oct 9
  61. #547 on Oct 11
  62. #558 on Oct 12
  63. #561 on Oct 13
  64. #567 on Oct 14
  65. #563 on Oct 15
  66. #565 on Oct 16
  67. #555 from Oct 17 to Oct 18
  68. #573 on Oct 19
  69. #581 on Oct 20
  70. #584 on Oct 21
  71. #570 on Oct 22
  72. #558 on Oct 24
  73. #616 on Oct 25
  74. #625 on Oct 28
  75. #628 on Oct 29
  76. #630 on Oct 30

Before you install

Network or broad shell

Automated signals, not a guarantee

Checked Nov 6, 2026

Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.

Show 39 notes
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/crabbox/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
Show all 52 signals by file

scripts/live-smoke.sh

  • Executable scriptline 1
    #!/usr/bin/env bash
  • Dangerous shell operationline 144
    rm -f "$__stderr"
  • Dangerous shell operationline 165
    rm -f "$__log"
  • Access to secretsline 350
    [Credential-related source omitted]
  • Access to secretsline 351
    [Credential-related source omitted]
  • Access to secretsline 352
    [Credential-related source omitted]
  • Access to secretsline 534
    [Credential-related source omitted]
  • Access to secretsline 760
    [Credential-related source omitted]
  • Access to secretsline 769
    [Credential-related source omitted]
  • Access to secretsline 917
    [Credential-related source omitted]
  • Access to secretsline 918
    [Credential-related source omitted]
  • Access to secretsline 1081
    [Credential-related source omitted]
  • Dangerous shell operationline 1149
    "$machine0_cli" rm "$leftover_name" --yes || true
  • Access to secretsline 1390
    [Credential-related source omitted]
  • Access to secretsline 1391
    [Credential-related source omitted]
  • Access to secretsline 1392
    [Credential-related source omitted]
  • Access to secretsline 1440
    [Credential-related source omitted]
  • Access to secretsline 1441
    [Credential-related source omitted]
  • Access to secretsline 1444
    [Credential-related source omitted]
  • Network accessline 1449
    export CRABBOX_BOXD_API_URL="${CRABBOX_BOXD_API_URL:-https://app.boxd.sh}"
  • Dangerous shell operationline 1468
    rm -rf "$proof_dir"
  • Network accessline 1498
    orgo_smoke() {   need_tool curl   need_tool jq
  • Access to secretsline 1502
    [Credential-related source omitted]
  • Access to secretsline 1504
    [Credential-related source omitted]
  • Access to secretsline 1508
    [Credential-related source omitted]
  • Access to secretsline 1509
    [Credential-related source omitted]
  • Access to secretsline 1510
    [Credential-related source omitted]
  • Access to secretsline 1513
    [Credential-related source omitted]
  • Access to secretsline 1514
    [Credential-related source omitted]
  • Access to secretsline 1515
    [Credential-related source omitted]
  • Access to secretsline 1518
    [Credential-related source omitted]
  • Network accessline 1530
    fi   local api_base="${CRABBOX_ORGO_API_BASE:-${ORGO_API_BASE_URL:-$configured_api_base}}"   api_base="${api_base:-https://www.orgo.ai/api}"
  • Network accessline 1531
    local api_base="${CRABBOX_ORGO_API_BASE:-${ORGO_API_BASE_URL:-$configured_api_base}}"   api_base="${api_base:-https://www.orgo.ai/api}"   api_base="${api_base%/}"
  • Network accessline 1532
    api_base="${api_base:-https://www.orgo.ai/api}"
  • Network accessline 1533
    api_base="${api_base%/}"   case "$api_base" in     https://*) ;;
  • Network accessline 1534
    case "$api_base" in     https://*) ;;     http://localhost | http://localhost:* | http://localhost/* | http://127.0.0.1 | http://127.0.0.1:* | http://127.0.0.1/* | 'http://[::1]' | 'http://[::1]':* | 'http://[::1]'/*) ;;
  • Network accessline 1535
    https://*) ;;
  • Network accessline 1536
    http://localhost | http://localhost:* | http://localhost/* | http://127.0.0.1 | http://127.0.0.1:* | http://127.0.0.1/* | 'http://[::1]' | 'http://[::1]':* | 'http://[::1]'/*) ;;
  • Network accessline 1555
    [Credential-related source omitted]
  • Access to secretsline 1555
    [Credential-related source omitted]

skills/crabbox-quickstart/SKILL.md

  • Dangerous shell operationline 64
    crabbox run --provider local-container --id <slug> --    sudo apt-get install -y make
  • Dangerous shell operationline 65
    sudo apt-get install -y make

skills/crabbox/SKILL.md

  • Access to secretsline 54
    [Credential-related source omitted]
  • Access to secretsline 58
    [Credential-related source omitted]
  • Access to secretsline 226
    [Credential-related source omitted]
  • Access to secretsline 228
    [Credential-related source omitted]
  • Access to secretsline 239
    [Credential-related source omitted]
  • Access to secretsline 242
    [Credential-related source omitted]
  • Network accessline 346
    crabbox desktop doctor --id <lease> crabbox desktop launch --id <lease> --browser --url https://example.com --webvnc --open --take-control
  • Network accessline 347
    crabbox desktop launch --id <lease> --browser --url https://example.com --webvnc --open --take-control
  • Dangerous shell operationline 407
    eval "$(crabbox ssh --provider local-container --id local-smoke)"
  • Dangerous shell operationline 413
    use `eval "$(crabbox ssh ...)"` to connect. After login, `cd` into the workdir

How the signals fit together

Facts from a static read of the files at the pinned commit. They describe what the code does, not why.

Declared and executed: 2 facts
Signal confidence: 52 facts

and 2 more

Works with

Agent compatibility, from the files in this repository
AgentStatusEvidenceInstall to
Claude CodeCompatibleStandard SKILL.md skills/crabbox/SKILL.md.claude/skills/<skill-name>/
CodexNativeManifest AGENTS.md.agents/skills/<skill-name>/
CursorCompatibleStandard SKILL.md skills/crabbox/SKILL.md.cursor/skills/<skill-name>/
Gemini CLICompatibleStandard SKILL.md skills/crabbox/SKILL.md.gemini/skills/<skill-name>/
GitHub CopilotCompatibleStandard SKILL.md skills/crabbox/SKILL.md.github/skills/<skill-name>/
OpenCodeCompatibleStandard SKILL.md skills/crabbox/SKILL.md.opencode/skills/<skill-name>/
  • Native The repository ships a manifest, folder or frontmatter field for this agent.
  • Compatible A standard SKILL.md that this agent can read.
  • Unknown No evidence either way.

Derived automatically from paths, manifests and frontmatter. Not tested on each agent.

Explore alternatives and comparisons

Add this badge to your README

It updates every night and links to this page.

openclaw/crabbox: #645 on hotskills, 1.5k stars

[![openclaw/crabbox on hotskills](https://hotskills.dev/badge/openclaw-crabbox.svg)](https://hotskills.dev/skill/openclaw-crabbox/)