Openclaw Migration Pro

OpenClaw 环境迁移工具专业版。识别 Skills 与其维护数据的关联关系， 完整迁移到另一个 OpenClaw 环境。 打包 → 运输 → 归位，像搬家一样简单。

This skill looks like a legitimate migration tool but the materials conflict about how credentials are handled and show examples that automatically send backup files to the 'current channel'. Before installing or running it: 1) ask the publisher to confirm whether credentials are excluded by default (and prefer the behavior that excludes secrets); 2) inspect scripts/analyze.sh and any pack/unpack code for reads of ~/.openclaw/credentials or network/send operations (grep for "credentials" "send" "channel" "scp" "rsync" "curl" "ssh"); 3) prefer running pack with --no-send and in an isolated VM or test account first; 4) if you must transfer backups, use encrypted channels (rsync/SSH) and delete temporary archives after transfer; 5) avoid piping unknown remote install scripts (curl | bash) unless you trust the source and have reviewed it; 6) if PROMOTION-v3 is part of the repo, treat it as marketing — confirm actual default behavior in code. If the author cannot clearly explain/point to the code that enforces exclusion of credentials, do not use it on any machine holding real API keys or sensitive data.

Type: OpenClaw Skill Name: openclaw-migration-pro Version: 1.1.1 The openclaw-migration-pro bundle describes a tool for migrating OpenClaw environments, including sensitive data like API keys (credentials/), memory files, and configurations. While the documentation (e.g., RELEASE-NOTES-v3.md and PROMOTION-v3.md) explicitly frames the inclusion of credentials as a feature for seamless migration, this capability presents a high risk for data exfiltration and exposure. The tool utilizes high-risk operations such as remote data transfer via rsync and software installation via 'curl | bash' (SKILL.md). Although the intent appears to be a legitimate utility and no hardcoded malicious endpoints were identified, the broad access to secrets and the built-in mechanisms for external data movement warrant a suspicious classification.