Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/openclaw/crabbox/statusgit clone --depth 1 https://github.com/openclaw/crabboxWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01387 |
| Opus 5 | $0.00000 | $0.00694 |
| Sonnet 5 | $0.00000 | $0.00277 |
| Haiku 4.5 | $0.00000 | $0.00139 |
Grade A, and why
status scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 121 lines — stays where its author put it; the contents beside it link to each section on GitHub.
status
crabbox status prints the current state of a lease: its slug, provider,
target OS, host, network, readiness, idle time, and expiry. By default it is a
read-only snapshot. Add --wait to block until the box becomes ready (or
reaches a terminal state).
crabbox status --id swift-crab
crabbox status --id swift-crab --json
crabbox status --id swift-crab --wait --wait-timeout 10m
crabbox status --id swift-crab --network tailscale
crabbox status --provider ssh --target macos --static-host mac-studio.local
Identifying the lease
--id accepts the canonical cbx_... lease ID or an active slug. For
provider=ssh (static hosts),
--id is optional: status resolves the configured static target or the local
claim for the current repo.
When --provider is omitted, an exact local claim or an unambiguous claimed
slug selects its recorded provider before that provider is initialized. An
explicit --provider still wins; a slug claimed by multiple providers asks
you to pass a canonical lease ID or --provider, and an identifier without a
local claim keeps the configured-provider fallback.
Several delegated and direct providers resolve their own native identifiers in addition to the Crabbox lease ID and local slug:
blacksmith-testbox— accepts atbx_...ID or local slug; derives a normalized status view fromblacksmith testbox list --all.blaxel— accepts a Crabbox lease ID (blx_<sandbox-id>) or local slug, verifies the local claim against Blaxel ownership labels, and reports the sandbox state, endpoint, pond, and readiness.namespace-devbox— accepts a lease ID, local slug, or existing Devbox name; prepares SSH through the Namespace CLI.namespace-instance— accepts a lease ID, local slug, or Compute instance ID; prepares SSH throughnsc proxy.exe-dev— accepts a lease ID, local slug, or exe.dev VM name; resolves the VM throughssh exe.dev ls.semaphore— resolves local claims and Semaphore job state through the Semaphore API.sprites— resolves local claims, Sprites labels, and SSH readiness throughsprite proxy.daytona— resolves Crabbox labels and sandbox state through the Daytona API.coder— accepts a Crabbox lease ID, local slug, Coder workspace name, orowner/workspace; plain status reads Coder inventory without starting stopped workspaces.islo— accepts anisb_...ID, a Crabbox-created sandbox name, or a local slug.e2b— accepts a lease ID, local slug, or a Crabbox-owned E2B sandbox ID in raw ore2b_<sandboxID>form.vercel-sandbox— accepts a Crabbox-created local slug orvsbx_...lease ID and verifies the Vercel Sandbox ownership metadata before reporting state.cloudflare-dynamic-workers— accepts a local Dynamic Workers claim, lifecycle run ID, or slug, then asks the loader for run metadata. Stable and explicit Worker cache IDs are not lifecycle IDs. The status target isworker-runtime, not a Linux host.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 121 lines · 0 tokens per session scan A 057b71e4884f
status is a command published in the GitHub repository openclaw/crabbox (1,343 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,387 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
checklist
Generate a custom checklist for the current feature based on user requirements.
clarify
Identify underspecified areas in the current feature spec by asking up to 5 highly targeted clarification questions and encoding answers back into the spec.
specify
Create or update the feature specification from a natural language feature description.
analyze
Perform a non-destructive cross-artifact consistency and quality analysis across spec.md, plan.md, and tasks.md after task generation.
converge
Assess the current codebase against the feature's spec, plan, and tasks, then append any remaining unbuilt work as new tasks to tasks.md so implement can complete it.
implement
Execute the implementation plan by processing and executing all tasks defined in tasks.md.