Team Resurrection

打包/搬家/分身 Agent 团队配置。保留 SOUL.md、团队成员、skills，换电脑或开新团队时一键搞定。执行前展示配置内容供用户确认，支持 --dry-run/--no-cron/--no-restart 细粒度控制。

This skill appears to do what it says, but it performs sensitive operations — copy of MEMORY.md/TOOLS.md (which may contain API keys / passwords), modification of ~/.qclaw/openclaw.json, creation of cron jobs, and restarting the OpenClaw gateway. Before installing or running: 1) Always run with --dry-run first and review the diff the tool prints for openclaw.json. 2) Inspect any搬家包 ZIP contents and cron_tasks.json payloads before allowing cron creation. 3) Do not share搬家包.zip files; if you must transfer them, encrypt them and use a trusted channel. 4) If unsure, run migrate/clone/pack in an isolated test environment (VM or container) to validate behavior. 5) Optionally review the included scripts (pack.py, migrate.py, clone.py) for any paths/commands you don’t expect — they use subprocess.run(shell=True) for certain openclaw commands, so ensure the openclaw binary in PATH is the expected one. If you need higher assurance, inspect the repo locally and confirm backups exist in ~/.qclaw/backup before proceeding.

Type: OpenClaw Skill Name: team-resurrection Version: 1.1.2 The bundle is a legitimate utility designed for backing up, migrating, and cloning OpenClaw agent environments. While the scripts (pack.py, migrate.py, and clone.py) perform high-privilege operations—such as reading sensitive files (TOOLS.md/MEMORY.md), modifying system configurations (openclaw.json), and creating cron tasks—these actions are strictly aligned with the stated purpose of 'Team Resurrection.' The implementation includes significant safety features, including Zip Slip path traversal defenses, automatic configuration backups, dry-run modes, and mandatory user confirmation prompts that display diffs and cron payloads before execution. No evidence of data exfiltration, stealthy persistence, or malicious prompt injection was found.