overthinkos/openclaw
openclaw/skills/openclaw/SKILL.md
Headless OpenClaw AI gateway image. Runs the gateway on port 18789 without a desktop environment. Use when working with the headless MUST be invoked before building, deploying, configuring, or troubleshooting the openclaw image.
development
Updated May 26, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins openclawInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 26, 2026, 6:24 AM35.6s1 file scanned
SKILL.md
- name:
- openclaw
- description:
- |
openclaw
Headless OpenClaw AI gateway — no desktop, no browser, just the gateway service.
Image Properties
| Property | Value | |----------|-------| | Base | cachyos | | Layers | agent-forwarding, openclaw, dbus, ov | | Platforms | linux/amd64 | | Ports | 18789 | | Registry | ghcr.io/overthinkos |
Full Layer Stack
cachyos(docker.io/cachyos/cachyos-v3, digest-pinned, Arch-derived)pixi→python→supervisord(transitive)nodejs(transitive via openclaw)openclaw— gateway on :18789, data volumedbus— message bus;ov— ov CLI toolchain
Ports
| Port | Service | Protocol | |------|---------|----------| | 18789 | OpenClaw gateway + Control UI | HTTP |
Quick Start
ov image build openclaw
ov config openclaw
ov start openclaw
# Gateway at http://localhost:18789
Key Layers
/ov-openclaw:openclaw— gateway npm package, supervisord service, data volume
Related Images
/ov-openclaw:openclaw-full— maximal variant (gateway + browser + all tools)
Verification
After ov start:
ov status openclaw— container runningov service status openclaw— all services RUNNINGcurl -s http://localhost:18789— OpenClaw gateway responds
Port Relay Architecture
OpenClaw gateway (18789) uses port relay (socat) — the gateway binds to loopback, socat forwards from the container interface. This avoids the allowedOrigins requirement for the Control UI.
When to Use This Skill
MUST be invoked when the task involves the headless openclaw image, deploying openclaw without a desktop, or comparing openclaw variants. Invoke this skill BEFORE reading source code or launching Explore agents.
Related
/ov-image:image— image family umbrella (image:entries inoverthink.yml, build/validate/inspect/list)/ov-build:build—build.ymlvocabulary (distros, builders, init-systems)
Related Skills
overthinkos/agents
development
VerifiedTrustedCommunity
Claude Code multi-agent support in Overthink — sub-agents, dynamic workflows, and agent teams, and how each drives the existing `ov eval` disposable beds to test and verify. MUST be invoked before authoring or invoking an ov sub-agent / dynamic workflow / agent team, wiring agent-lifecycle hooks, or asking "which primitive should drive the R10 beds?".
SKILL.mdUpdated May 31, 2026
overthinkos/workspace-mount
tools
VerifiedTrustedCommunity
Mounts a virtiofs share tagged `workspace` at /workspace inside a VM guest via a systemd .mount unit. Use when a kind:vm entity shares a host directory into the guest and you need it auto-mounted (and re-mounted at every boot).
SKILL.mdUpdated May 30, 2026
overthinkos/android
development
VerifiedTrustedCommunity
MUST be invoked before any work involving: the `kind: android` schema kind, a `target: android` deploy, the `apk:` layer package format (installing Android apps declaratively), AndroidDeployTarget, an in-pod emulator OR a remote/physical adb-endpoint device, or nested `pod → android` deployment. The first-class Android device + app surface that sits above `ov eval adb`/`appium`.
SKILL.mdUpdated May 26, 2026
overthinkos/git-workflow
tools
VerifiedTrustedCommunity
Use when committing, branching, pushing, merging, tagging, creating PRs, or approving/merging PRs with gh — the feat/-branch, R10-gated, never-force-push landing workflow across the main repo + the plugins submodule + image/<distro> submodules. Covers sync-to-upstream, branch/worktree pruning, the fork+PR path for contributors without write access, and cross-repo @github landing order.
SKILL.mdUpdated May 25, 2026