← Back to Skills Marketplace
tubo70

OpenClaw Migration

by tubo70 · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
128
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install clawmover-migration
Description
Shared OpenClaw skill for guiding ClawMover backup and restore workflows with explicit confirmation, input validation, and a manual-command-first execution p...
README (SKILL.md)

ClawMover Migration

Use this skill when the user wants help with OpenClaw backup, restore, migration planning, simulated restore, or checking whether the ClawMover CLI is installed.

This is a shared OpenClaw skill. It must behave conservatively, validate inputs before use, and explain risky operations before execution.

Purpose

This skill helps OpenClaw understand natural language requests such as:

  • Back up this OpenClaw machine
  • Check whether ClawMover is installed
  • Do a simulated restore first
  • Restore this migration onto this machine

Runtime Dependency

This skill depends on the published CLI package @clawmover/cli.

If the CLI is missing, do not install it silently.

First explain the installation step and offer two options:

  • provide the install command for the user to run manually
  • run the install command only after explicit confirmation

Shared-Skill Expectation

This skill is intended to be installed as a shared skill with the directory name:

clawmover-migration

Execution Policy

Default behavior:

  • explain what command or step is needed
  • validate required inputs before use
  • prefer providing commands for the user to run manually
  • only execute commands when the user clearly asks the agent to do so

Always require explicit confirmation before:

  • installing @clawmover/cli
  • starting a backup
  • performing a real restore without --dest-path

Prefer simulated restore before real restore.

Input Validation Rules

Validate inputs before generating or executing any command.

instanceId

  • accept only the expected ClawMover migration identifier format
  • reject values containing whitespace, shell separators, or control characters
  • if the format looks invalid, stop and ask the user to re-check the value from https://clawmover.com

verificationCode

  • accept only exactly 6 digits
  • reject any other format

destPath

  • accept only a single local absolute path
  • reject values containing newlines or shell control characters such as ;, &&, |, or backticks
  • if the path is ambiguous, ask the user to provide a clean absolute path

dataSecretKey

  • treat as sensitive input
  • do not echo it back in full
  • do not include it in logs or explanatory output
  • do not store it outside the immediate task context

Sensitive Data Handling

Treat the following as sensitive:

  • dataSecretKey
  • verification codes
  • any local paths that may reveal user-specific private data

Rules:

  • never repeat the full dataSecretKey
  • never include the full key in examples, logs, or summaries
  • mask sensitive values in displayed commands unless the user explicitly asks for the exact command text
  • do not ask the user to paste sensitive values again unless necessary

Install Or Verify CLI

First check whether clawmover is available.

If it is missing:

  • explain that this skill requires @clawmover/cli
  • explain that installation modifies the host environment
  • offer the manual install command
  • only run the install command after explicit confirmation

Backup Workflow

Required inputs:

  • instanceId
  • dataSecretKey

The instanceId is obtained after the user creates a new migration at https://clawmover.com and completes payment.

Preferred workflow:

  1. verify that required inputs are present and valid
  2. explain the backup command that will be used
  3. ask whether the user wants to run it manually or have the agent run it
  4. if the service requests email verification, ask for the 6-digit code
  5. validate the code before resuming

When showing example commands, use placeholders only as documentation examples and do not treat them as directly executable templates.

Restore Workflow

Required inputs:

  • instanceId
  • dataSecretKey

The instanceId is obtained after the user creates a new migration at https://clawmover.com and completes payment.

Optional inputs:

  • snapshotId
  • destPath

Preferred workflow:

  1. recommend simulated restore first using --dest-path
  2. validate destPath before use
  3. explain whether the restore is simulated or real
  4. ask whether the user wants to run it manually or have the agent run it
  5. if email verification is required, request and validate the 6-digit code before resuming

For real restore, omit --dest-path, but only after explicit confirmation that the user wants to modify the local OpenClaw environment.

Manual Command Option

When possible, offer to provide exact commands for the user to run manually.

Use this option by default if:

  • the user is uncomfortable with agent-executed commands
  • the environment is sensitive
  • the action installs software globally
  • the action performs a real restore

Safety Rules

  • do not silently install @clawmover/cli
  • do not silently run backup
  • do not silently run real restore
  • do not execute commands using unvalidated user input
  • prefer simulated restore before real restore
  • explain when a command will modify the local OpenClaw environment
  • treat verification codes and dataSecretKey as sensitive inputs
  • keep behavior suitable for a shared skill available across sessions

Response Style

Keep responses short, operational, and explicit about risk.

Good examples:

  • I can check whether clawmover is installed first.
  • I can give you the install command, or run it after your confirmation.
  • I recommend a simulated restore with a validated destination path before a real restore.
  • A real restore can modify your local OpenClaw environment.
Usage Guidance
This skill is coherent and conservative, but before you install or let it run commands: (1) prefer the manual-install option and review the @clawmover/cli package/source (e.g., npm/github) so you know what code will be executed; (2) never paste long secret keys into chat unless necessary — follow the skill's guidance on masking and confirm it won’t be stored; (3) when asked to run commands that modify your system (real restore, global installs), use the manual command option or verify the exact command before allowing the agent to execute it.
Capability Analysis
Type: OpenClaw Skill Name: clawmover-migration Version: 1.0.1 The skill facilitates system backup and restoration using an external CLI package (@clawmover/cli) and a third-party service (clawmover.com). While SKILL.md includes extensive defensive instructions, such as strict input validation for shell injection characters, sensitive data masking for 'dataSecretKey', and mandatory user confirmation before installation or execution, the skill inherently requires high-risk capabilities including shell command execution and local file system modification. Per the provided criteria, risky capabilities plausibly needed for the stated purpose are classified as suspicious.
Capability Tags
cryptocan-make-purchases
Capability Assessment
Purpose & Capability
The name/description match the instructions: the skill guides backups/restores, checks for the clawmover CLI, validates inputs, and requires explicit confirmation before actions. No unrelated capabilities or credentials are requested.
Instruction Scope
SKILL.md stays within scope: it explains checks to run, input validation rules, and when to run or show commands. It does not instruct reading unrelated files, environment variables, or posting data to external endpoints beyond the expected clawmover site reference.
Install Mechanism
There is no install spec in the package (instruction-only). The runtime text references installing @clawmover/cli and correctly requires explicit user confirmation before installation. This is acceptable, but installing the CLI will fetch third-party code (e.g., from npm) — users should inspect that package/source before consenting.
Credentials
The skill requests no environment variables or host config paths. It accepts sensitive inputs (dataSecretKey, 6-digit codes) from the user but includes clear handling rules (masking, no logging, no storage). The sensitivity is proportional to the stated tasks.
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges or modify other skills/config. It explicitly disallows silent installs or silent execution, which keeps its privilege footprint minimal.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install clawmover-migration
  3. After installation, invoke the skill by name or use /clawmover-migration
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
**Version 1.0.1 Changelog – More cautious and explicit shared skill policies** - Added an examples.md file. - Switched to a conservative, confirm-first policy: no silent CLI installs, backups, or restores; always explain before acting. - Now validates all user inputs (instanceId, dataSecretKey, verification code, destPath) before generating or running commands. - Clarified that dataSecretKey must be treated as sensitive input and must not be echoed, logged, or unnecessarily repeated. - Offers manual command options before attempting agent-executed installs or migrations. - Always prefers simulated restores and warns about real environment changes. - Response style is more explicit, operational, and short; sensitive data is never echoed or leaked.
v1.0.0
Initial release of clawmover-migration skill for OpenClaw. - Automates OpenClaw migration operations from connected channels when SSH access is unavailable. - Verifies or installs the `clawmover` CLI automatically. - Guides users through backup and restore workflows, including email verification and pending operation resume. - Prefers safe test restores with `--dest-path` and provides clear operational summaries. - Handles input validation, error reporting, sensitive data, and plugin reinstall reporting. - Provides concise and actionable messaging throughout the process.
Metadata
Slug clawmover-migration
Version 1.0.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is OpenClaw Migration?

Shared OpenClaw skill for guiding ClawMover backup and restore workflows with explicit confirmation, input validation, and a manual-command-first execution p... It is an AI Agent Skill for Claude Code / OpenClaw, with 128 downloads so far.

How do I install OpenClaw Migration?

Run "/install clawmover-migration" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is OpenClaw Migration free?

Yes, OpenClaw Migration is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does OpenClaw Migration support?

OpenClaw Migration is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created OpenClaw Migration?

It is built and maintained by tubo70 (@tubo70); the current version is v1.0.1.

💬 Comments