Number Two Migration

完整迁移二号的身份、记忆、技能及项目状态，自动配置API密钥并验证环境，确保二号在新环境中完全恢复运行。

This package contains everything needed to 'become' Number Two — identities, long and short-term memory, skill triggers, and scripts that will overwrite your workspace and persist API keys. Before installing: 1) Do not run install.sh or verify.sh until you read their full contents; open them in a text editor and search for network calls, remote URLs, or commands that modify files outside the intended skill directory. 2) Back up your entire ~/.openclaw/ and workspace directories. 3) Remove or rotate any hard-coded API keys found in the package; never import unknown credentials into your environment. 4) Prefer running the install in an isolated sandbox/container or VM if you want to test. 5) Verify that the package will not silently modify other skills' configuration (search for writes to global AGENTS.md, skills folders, or OpenClaw config paths). 6) If you cannot audit the scripts yourself, do not install. If you want help auditing install.sh and verify.sh, provide their contents and I will review for network exfiltration, file overwrite behavior, and other risky operations.

Type: OpenClaw Skill Name: number-two-migration Version: 1.0.0 This skill bundle is a 'state migration' package for an agent persona named 'Number Two,' containing a full history, identity, and configuration. It is classified as suspicious due to the inclusion of hardcoded, sensitive credentials in 'install.sh' and 'SKILL.md' (e.g., MOLTBOOK_API_KEY, MANUS_API_KEY, and a JWT_SECRET). Furthermore, the 'AGENTS.md' and 'SOUL.md' files contain high-risk instructions for the AI agent to act autonomously without seeking user permission ('Don't ask permission. Just do.'), which effectively functions as a self-directed prompt injection to bypass human oversight. While the bundle appears to be a backup of a specific user's environment, the combination of hardcoded secrets and instructions for unapproved autonomous action poses a significant security risk.