Description

OpenClaw workspace 备份/恢复/合并工具。支持：完整备份、合并恢复（不覆盖已有）、Cron 任务备份、会话记录备份、配置导出。触发词：「备份」「恢复」「迁移」「换电脑」「导出配置」「合并记忆」。当 workspace 需要迁移、定期备份、或从另一台设备恢复时使用。

README (SKILL.md)

Clawmerge - Workspace 备份/恢复工具

Name: Clawmerge
Author: sinoslug

换电脑不丢记忆，备份不覆盖重要文件。

核心能力

功能	说明
完整备份	打包整个 workspace（可排除敏感文件）
合并恢复	解压时不覆盖已有文件，适合从另一台设备增量恢复
`--merge-auth`	备份里有但本地没有 gateway token 时，自动填充（additive only）
Cron 备份	自动备份 cron 任务配置
会话备份	可选包含会话记录（.jsonl）
配置导出	导出脱敏后的公开配置

使用场景

场景 1：定期备份（手动）

cd ~/.openclaw/workspace
./skills/clawmerge/scripts/one-click-backup.sh /tmp/backup-$(date +%Y%m%d).tar.gz

场景 2：换电脑后恢复（合并模式）

# 从备份文件恢复，不覆盖已有文件
./skills/clawmerge/scripts/one-click-restore.sh /path/to/backup.tar.gz --merge

场景 3：查看备份内容（不解压）

tar -tzf backup.tar.gz | head -50

场景 4：只备份 Cron 任务

./skills/clawmerge/scripts/backup-cron-tasks.sh

脚本清单

脚本	用途
`one-click-backup.sh`	一键备份 workspace
`one-click-restore.sh`	解压恢复（支持 --merge 合并模式）
`backup-cron-tasks.sh`	单独备份 cron 配置
`restore-cron-tasks.sh`	恢复 cron 配置
`discover-scripts.py`	扫描 workspace 中的自定义脚本
`gen-requirements.py`	生成 requirements.txt
`post-restore-check.sh`	恢复后检查完整性
`workspace-manager.sh`	workspace 空间管理（查看大小/清理）

备份排除规则

以下文件默认排除（不备份）：

排除	原因
`*.pyc`	编译缓存
`__pycache__/`	Python 缓存
`.session/`	临时会话
`node_modules/`	npm 包（可从 package.json 恢复）
`secrets.json`	密钥文件
`openclaw.json`	包含 bot token 等敏感信息

配置备份：敏感配置用 configs/public-config.json 代替（含股票列表、推送目标等公开部分，密钥用占位符）。

合并恢复逻辑（--merge）

# 合并模式：遇到同名文件
# - 若原文件与备份不同 → 保留原文件（不覆盖）
# - 若原文件不存在 → 从备份解压
# - 备份中有、原文件没有 → 恢复

使用 --merge 的场景：

从另一台设备的备份恢复（避免覆盖本机已有的配置）
合并两台设备的工作成果

不使用 --merge 的场景：

全新环境直接恢复 → 直接解压覆盖

Dry Run 预览

# 先看会备份哪些文件，不实际执行
./one-click-backup.sh --dry-run /tmp/test.tar.gz

输出物

备份成功后生成：

backup.tar.gz：主备份文件
backup-manifest.txt：备份文件清单
backup-cron-config.json：Cron 任务配置（JSON格式）

恢复后生成：

restore-report.txt：恢复报告（含跳过/覆盖/新增文件列表）

故障处理

问题	解决方案
备份文件过大	使用 `--exclude` 排除大文件/目录
恢复失败	检查 `.tar.gz` 是否损坏；尝试 `tar -tzf` 验证
Cron 未恢复	手动运行 `restore-cron-tasks.sh`
会话记录丢失	下次启动 agent 时会自动重建空会话

依赖

bash
tar
python3（用于 discover-scripts.py 和 gen-requirements.py）

备份不是为了恢复，是为了放心地往前走。 📦

Usage Guidance

This tool largely does what it says, but inspect and test before trusting it with real backups. Specific recommendations: - Review the scripts yourself (especially backup-cron-tasks.sh, restore-cron-tasks.sh, one-click-restore.sh) to confirm how tokens and credentials are handled. - Do a dry-run first (scripts support --dry-run) and inspect the generated backup archive contents before restoring anywhere. - Back up your current ~/.openclaw/openclaw.json and any agent credential files before running a restore. - Avoid using --merge-auth unless you understand where the backup's token comes from and you trust the source; prefer manual token copy if uncertain. - Note the scripts scan system crontab and common dirs (/opt, ~/scripts); if you have sensitive scripts outside the workspace, consider running discovery/backup in a constrained environment or removing those entries first. - Because some messages in scripts claim tokens are excluded while code writes an auth_token field, assume tokens may leak into backup artifacts unless you verify the produced archive contents. If you're unsure, install and run the skill in an isolated/test account first.

Capability Analysis

Type: OpenClaw Skill Name: clawmerge Version: 3.0.9 The bundle provides comprehensive backup and restore functionality for OpenClaw workspaces, including cron jobs and session history. It is classified as suspicious due to a discrepancy in scripts/backup-cron-tasks.sh, where the code explicitly extracts the gateway authentication token from ~/.openclaw/openclaw.json and includes it in the backup file, while the script's console output explicitly claims that auth tokens are NOT included for security. While this behavior facilitates migration, the misleading UI message regarding sensitive data collection is a concern. The scripts also perform high-risk operations such as modifying system crontabs and installing Python dependencies via pip3.

Capability Assessment

ℹ Purpose & Capability

The name/description (workspace backup/merge/restore) aligns with the included scripts: backup, restore, cron export/restore, script discovery, session handling. Actions such as reading ~/.openclaw, packaging workspace files, and restoring into the workspace are coherent with the stated purpose.

⚠ Instruction Scope

The runtime scripts scan system crontab, common system directories (/opt/scripts, ~/scripts, ~/bin), and read multiple OpenClaw files (e.g., ~/.openclaw/openclaw.json, ~/.openclaw/cron/jobs.json). They also can modify system crontab, copy scripts into ~/scripts, set execute permissions, and write to ~/.openclaw/openclaw.json when --merge-auth is used. While some of this is expected for a migration tool, the scripts collect and may write machine-level credentials (gateway token) and scan broad filesystem locations beyond the workspace, which expands the scope beyond simple file packaging.

✓ Install Mechanism

This is instruction-only with included scripts (no external install spec, no remote downloads). Nothing in the install channel pulls remote code or writes arbitrary binaries—risk from install mechanism is low.

⚠ Credentials

The skill requests no environment variables, but it directly reads and can write sensitive local configuration files (e.g., ~/.openclaw/openclaw.json, agents auth files, system crontab). Notably, backup-cron-tasks.py populates an 'auth_token' field from ~/.openclaw/openclaw.json (contradicting script output claiming tokens are not included), and restore-cron-tasks.sh contains logic to fill the local gateway token from the backup when --merge-auth is used. Exporting auth tokens into backup artifacts or automatically filling local tokens increases the risk surface and is not fully consistent with the doc's stated exclusions.

ℹ Persistence & Privilege

The skill is not force-installed (always: false) and does not request platform-level privileges. However, its scripts intentionally modify local files (workspace, configs, system crontab) and may modify ~/.openclaw/openclaw.json in merge mode. That behavior is expected for a restore tool but amplifies risk if backups contain sensitive tokens.

Version History

v3.0.9

v3.0.9: 修复restore安全问题；修复backup路径bug；新增版本检查；cron merge支持--merge-auth

v3.0.8

v3.0.8: 修复 --with-sessions 的 tar 逻辑（--exclude 对所有路径生效，包括显式添加）

v3.0.7

v3.0.7: 修复 --with-sessions 参数无效的 bug（会话记录未实际打包）

v3.0.6

v3.0.6: 修复发布问题、增量备份优化

v3.0.5

v3.0.5: 移除 sudo 命令，避免安全误报

v3.0.4

v3.0.4: 移除 HTTP 服务器功能，避免被 VirusTotal 误报

v3.0.3

v3.0.3: 精简 SKILL.md，优化描述

v3.0.2

v3.0.2: 优化内容，重新发布触发审核

v3.0.1

v3.0.1: 真正修复备份逻辑，使用 tar -C 切换到 workspace 目录备份

v3.0.0

clawmerge 3.0.0 – Major update - Version updated from 2.5.0 to 3.0.0 - Documentation and metadata updates to reflect major version increase - No user-facing new features, fixes, or options added in this release - All backup, restore, disaster recovery, session and cron task features remain as in 2.5.0

v2.5.0

NEW: Python dependencies backup (requirements.txt), Post-restore check script

v2.4.1

FIXED: task-scripts directory not found error - skip directory if no scripts discovered

v2.4.0

NEW: Auto-discover task scripts from cron, configs, and common directories. NEW: Generate scripts-list.json with all discovered scripts. NEW: Restore task scripts script (restore-task-scripts.sh). IMPROVED: Complete backup workflow (scripts + configs + cron).

v2.3.2

IMPROVED: Better error handling for missing export scripts. NEW: Installation guide (INSTALL-CONFIG-TOOLS.md) for配套 scripts. FIXED: Clearer messages when scripts or directories are missing.

v2.3.1

NEW: Auto-export public configuration before backup (fully automated, no manual step needed).

v2.3.0

NEW: Public configuration export system (safe to backup, no sensitive data). NEW: Configuration separation (public vs sensitive vs private). NEW: Auto-generate recovery scripts with placeholder guidance. IMPROVED: Backup includes configs/ directory and public-config.json.

v2.2.2

FIXED: --with-sessions parameter now correctly includes session records (removed .backup-sessions from EXCLUDE_ITEMS)

v2.2.1

v2.2.1: Fixed cron export files not being included in backup archive

v2.2.0

v2.2: FIXED - Cron tasks integrated in archive, Session records backup (optional --with-sessions)

v2.1.0

v2.1: Added cron tasks backup/export for easy migration. Backup now includes cron configuration + system crontab. Restore provides migration guidance.

Metadata

Slug clawmerge

Version 3.0.9

License MIT-0

All-time Installs 1

Active Installs 1

Total Versions 21

Frequently Asked Questions

What is Clawmerge?

OpenClaw workspace 备份/恢复/合并工具。支持：完整备份、合并恢复（不覆盖已有）、Cron 任务备份、会话记录备份、配置导出。触发词：「备份」「恢复」「迁移」「换电脑」「导出配置」「合并记忆」。当 workspace 需要迁移、定期备份、或从另一台设备恢复时使用。 It is an AI Agent Skill for Claude Code / OpenClaw, with 279 downloads so far.

How do I install Clawmerge?

Run "/install clawmerge" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Clawmerge free?

Yes, Clawmerge is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Clawmerge support?

Clawmerge is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Clawmerge?

It is built and maintained by sinoslug (@sinoslug); the current version is v3.0.9.

More Skills

Clawmerge