← Back to Skills Marketplace
lovelcp

Zhuaxia

by kissrain · GitHub ↗ · v0.4.1 · MIT-0
cross-platform ⚠ suspicious
410
Downloads
0
Stars
1
Active Installs
5
Versions
Install in OpenClaw
/install zhuaxia
Description
Export and import OpenClaw instances as portable .claw packages for backup, sharing, and migration. Use when: user wants to back up, share, migrate, or resto...
Usage Guidance
Things to consider before installing: - The skill will read files under ~/.openclaw (IDENTITY.md, config, workspace) and search common folders for .claw files. This is consistent with backup/import, but the SKILL.md says these reads happen 'silently' before asking — if you don't want that, don't allow the skill to run until you've reviewed it. - The instructions call an external command 'clawhub' (and reference clawctl usage) but the skill metadata only declares node as required. Confirm that 'clawhub' is present on your system or understand what will happen when that command is missing. - Review scripts/clawctl.mjs yourself (or run it in an isolated sandbox) to verify there are no network exfiltration calls, that credential-stripping works as claimed, and that backups are created where you expect. - If you plan to share .claw files, inspect a generated package in a safe environment and verify secrets were removed before distributing. - If unsure, run the tool manually from a terminal (node scripts/clawctl.mjs --help) rather than allowing autonomous agent invocation, and consider running it on a disposable VM or container first.
Capability Analysis
Type: OpenClaw Skill Name: zhuaxia Version: 0.4.1 The 'zhuaxia' skill bundle provides legitimate utility for exporting, importing, and backing up OpenClaw instances. The core logic in `scripts/clawctl.mjs` includes robust security measures, such as a credential sanitizer that uses regex patterns and Shannon entropy to detect and strip API keys (OpenAI, Anthropic, etc.) before export. It also implements a mandatory exclusion list (`MANDATORY_FILE_EXCLUSIONS`) to prevent the accidental packaging of sensitive directories like `~/.ssh`, `credentials/`, or `sessions/`. The `SKILL.md` instructions are well-structured, emphasizing user confirmation, dry-runs, and automatic safety backups before performing destructive operations, with no evidence of malicious intent or data exfiltration.
Capability Assessment
Purpose & Capability
The claimed purpose (export/import OpenClaw instances) matches the included CLI script and file operations. Required binary 'node' is reasonable. However, the SKILL.md instructs running 'clawhub list' (and references clawctl for rollback) even though 'clawhub' (or clawctl as a separate binary) is not declared as a required binary — a minor incoherence.
Instruction Scope
The SKILL.md explicitly tells the agent to 'silently gather' local data (ls ~/.openclaw/workspace/, cat IDENTITY.md, check ~/.openclaw/openclaw.json, search common folders for .claw files) before asking the user. Reading these user files is plausible for export/import, but doing so without asking is scope creep and a privacy risk. The instructions also run an external tool ('clawhub') not declared in requirements.
Install Mechanism
There is no network install spec and no downloads; the skill ships a local Node script (scripts/clawctl.mjs) and expects node on PATH, which is proportionate. No extract-from-URL or third-party package install step was specified in registry metadata.
Credentials
The skill does not request environment variables or credentials. It does read files under ~/.openclaw (workspace, IDENTITY.md, config), which is consistent with backing up an OpenClaw instance, but users should be aware those files can contain sensitive information despite claims of automatic stripping.
Persistence & Privilege
The skill is not always: true and does not request elevated or system-wide configuration changes. It creates backups under ~/.openclaw/.zhuaxia-backups/ (expected for its purpose) and does not appear to modify other skills' configs per the provided instructions.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install zhuaxia
  3. After installation, invoke the skill by name or use /zhuaxia
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.4.1
zhuaxia 0.4.1 changelog - Added a _meta.json metadata file for the skill. - No functional changes to workflows or CLI usage.
v0.4.0
Bundle user-installed skills into .claw packages; auto-install on import with version-aware skip; show bundled skills in dry-run
v0.3.0
Add auto-backup before import, rollback support, manual backup, and backup listing
v0.2.0
Add AI agent behavior guide: smart defaults, conflict detection, auto config merge, skill dependency install, credential checklist
v0.1.0
Initial release: export/import OpenClaw instances as .claw packages
Metadata
Slug zhuaxia
Version 0.4.1
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 5
Frequently Asked Questions

What is Zhuaxia?

Export and import OpenClaw instances as portable .claw packages for backup, sharing, and migration. Use when: user wants to back up, share, migrate, or resto... It is an AI Agent Skill for Claude Code / OpenClaw, with 410 downloads so far.

How do I install Zhuaxia?

Run "/install zhuaxia" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Zhuaxia free?

Yes, Zhuaxia is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Zhuaxia support?

Zhuaxia is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Zhuaxia?

It is built and maintained by kissrain (@lovelcp); the current version is v0.4.1.

💬 Comments