doctor

doctor is a command for coding agents from openclaw/crabbox. It costs 0 tokens per session (3,355 once invoked), scanned A, original, MIT.

A preflight checker for Crabbox, a tool that prepares and manages remote development machines. It checks local tools, configuration, SSH keys and whether a selected provider is ready, without changing provider resources.

In plain words
What is it for?
Use it to check providers such as AWS, Hetzner, XCP-ng, Hostinger or SSH targets. It can inspect a lease, profile or previous run, and can return results as JSON.
Why use it?
It finds setup problems before a longer workflow fails. You can run it after changing credentials or configuration, or use it as a quick check in automated build jobs.

Command

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/openclaw/crabbox/doctor
Clone the repo
git clone --depth 1 https://github.com/openclaw/crabbox

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for doctor

README.md
[![agentmods](https://agentmods.dev/badge/commands/openclaw/crabbox/doctor.svg)](https://agentmods.dev/commands/openclaw/crabbox/doctor)
Your own site
<a href="https://agentmods.dev/commands/openclaw/crabbox/doctor"><img src="https://agentmods.dev/badge/commands/openclaw/crabbox/doctor.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 3,355 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.03355
Opus 5 $0.00000 $0.01677
Sonnet 5 $0.00000 $0.00671
Haiku 4.5 $0.00000 $0.00335

Measured today against content hash 10c496d18d7c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

doctor scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

`git`, `rsync`, `curl`, and `jq` versions. Native Windows targets use a
docs/commands/doctor.md · 283 lines

How it starts

The opening of the file, as written. The whole thing — 283 lines — stays where its author put it; the contents beside it link to each section on GitHub.

doctor

crabbox doctor runs a preflight before you commit to a long workflow. It is fast on a healthy machine, non-destructive, and never creates, mutates, or deletes provider resources. Bare crabbox doctor is also the pre-configuration local-readiness check: with no selected provider, doctor reports source=compiled_default selected=false, leaves the top-level JSON provider empty, and skips provider credential readiness with a warning. Run it before your first crabbox run, after rotating tokens or editing config, and as a sanity check in agent boot sequences or CI smoke jobs.

crabbox doctor
crabbox doctor --provider aws
crabbox doctor --provider hetzner --target linux
crabbox doctor --provider xcp-ng --json
crabbox doctor --provider hostinger
crabbox doctor --provider ssh --target windows --windows-mode normal --static-host win-dev.local
crabbox doctor --id swift-crab
crabbox doctor --profile live-qa --id swift-crab
crabbox doctor --from-run run_abcdef123456
crabbox doctor --pond my-pond
crabbox doctor --all --prepare-check
crabbox doctor --json

crabbox doctor --help (or -h) shows these modes and the primary doctor flags before the complete provider flag reference. Help prints to stderr and exits successfully even when configuration is invalid; it does not run readiness checks or change configuration.

What it checks

Doctor walks a sequence of checks, skipping any that do not apply to the selected provider, target, or context:

config     writable config file exists and has safe permissions (expects 0600)
provider-selection selected provider and its winning config source
tools      provider-applicable local tools are present and executable
remote     optional SSH/tool probe against a resolved lease (--id / --from-run)
coord      coordinator URL is reachable and healthy (brokered providers)
broker     signed token is valid and an identity resolves
provider   provider readiness, with no mutation; broker secrets or a direct API probe
admin      admin token can list the machine pool (only when an admin token is set)
capacity   warns when the implicit default machine type is oversized for tests
ssh-key    explicit SSH key path and matching .pub are readable
pond       Tailscale policy row exists for a local pond (--pond)

Read the full file on GitHub · 283 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +5 lines 10c496d18d7c
  2. 4d ago First seen · 278 lines · 0 tokens per session scan A bf3b2b85ed73

Subscribe to this mod's changes

doctor is a command published in the GitHub repository openclaw/crabbox (1,362 stars, last pushed today), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 3,355 tokens. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.