← 返回 Skills 市场
tubo70

OpenClaw Migration

作者 tubo70 · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
128
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install clawmover-migration
功能描述
Shared OpenClaw skill for guiding ClawMover backup and restore workflows with explicit confirmation, input validation, and a manual-command-first execution p...
使用说明 (SKILL.md)

ClawMover Migration

Use this skill when the user wants help with OpenClaw backup, restore, migration planning, simulated restore, or checking whether the ClawMover CLI is installed.

This is a shared OpenClaw skill. It must behave conservatively, validate inputs before use, and explain risky operations before execution.

Purpose

This skill helps OpenClaw understand natural language requests such as:

  • Back up this OpenClaw machine
  • Check whether ClawMover is installed
  • Do a simulated restore first
  • Restore this migration onto this machine

Runtime Dependency

This skill depends on the published CLI package @clawmover/cli.

If the CLI is missing, do not install it silently.

First explain the installation step and offer two options:

  • provide the install command for the user to run manually
  • run the install command only after explicit confirmation

Shared-Skill Expectation

This skill is intended to be installed as a shared skill with the directory name:

clawmover-migration

Execution Policy

Default behavior:

  • explain what command or step is needed
  • validate required inputs before use
  • prefer providing commands for the user to run manually
  • only execute commands when the user clearly asks the agent to do so

Always require explicit confirmation before:

  • installing @clawmover/cli
  • starting a backup
  • performing a real restore without --dest-path

Prefer simulated restore before real restore.

Input Validation Rules

Validate inputs before generating or executing any command.

instanceId

  • accept only the expected ClawMover migration identifier format
  • reject values containing whitespace, shell separators, or control characters
  • if the format looks invalid, stop and ask the user to re-check the value from https://clawmover.com

verificationCode

  • accept only exactly 6 digits
  • reject any other format

destPath

  • accept only a single local absolute path
  • reject values containing newlines or shell control characters such as ;, &&, |, or backticks
  • if the path is ambiguous, ask the user to provide a clean absolute path

dataSecretKey

  • treat as sensitive input
  • do not echo it back in full
  • do not include it in logs or explanatory output
  • do not store it outside the immediate task context

Sensitive Data Handling

Treat the following as sensitive:

  • dataSecretKey
  • verification codes
  • any local paths that may reveal user-specific private data

Rules:

  • never repeat the full dataSecretKey
  • never include the full key in examples, logs, or summaries
  • mask sensitive values in displayed commands unless the user explicitly asks for the exact command text
  • do not ask the user to paste sensitive values again unless necessary

Install Or Verify CLI

First check whether clawmover is available.

If it is missing:

  • explain that this skill requires @clawmover/cli
  • explain that installation modifies the host environment
  • offer the manual install command
  • only run the install command after explicit confirmation

Backup Workflow

Required inputs:

  • instanceId
  • dataSecretKey

The instanceId is obtained after the user creates a new migration at https://clawmover.com and completes payment.

Preferred workflow:

  1. verify that required inputs are present and valid
  2. explain the backup command that will be used
  3. ask whether the user wants to run it manually or have the agent run it
  4. if the service requests email verification, ask for the 6-digit code
  5. validate the code before resuming

When showing example commands, use placeholders only as documentation examples and do not treat them as directly executable templates.

Restore Workflow

Required inputs:

  • instanceId
  • dataSecretKey

The instanceId is obtained after the user creates a new migration at https://clawmover.com and completes payment.

Optional inputs:

  • snapshotId
  • destPath

Preferred workflow:

  1. recommend simulated restore first using --dest-path
  2. validate destPath before use
  3. explain whether the restore is simulated or real
  4. ask whether the user wants to run it manually or have the agent run it
  5. if email verification is required, request and validate the 6-digit code before resuming

For real restore, omit --dest-path, but only after explicit confirmation that the user wants to modify the local OpenClaw environment.

Manual Command Option

When possible, offer to provide exact commands for the user to run manually.

Use this option by default if:

  • the user is uncomfortable with agent-executed commands
  • the environment is sensitive
  • the action installs software globally
  • the action performs a real restore

Safety Rules

  • do not silently install @clawmover/cli
  • do not silently run backup
  • do not silently run real restore
  • do not execute commands using unvalidated user input
  • prefer simulated restore before real restore
  • explain when a command will modify the local OpenClaw environment
  • treat verification codes and dataSecretKey as sensitive inputs
  • keep behavior suitable for a shared skill available across sessions

Response Style

Keep responses short, operational, and explicit about risk.

Good examples:

  • I can check whether clawmover is installed first.
  • I can give you the install command, or run it after your confirmation.
  • I recommend a simulated restore with a validated destination path before a real restore.
  • A real restore can modify your local OpenClaw environment.
安全使用建议
This skill is coherent and conservative, but before you install or let it run commands: (1) prefer the manual-install option and review the @clawmover/cli package/source (e.g., npm/github) so you know what code will be executed; (2) never paste long secret keys into chat unless necessary — follow the skill's guidance on masking and confirm it won’t be stored; (3) when asked to run commands that modify your system (real restore, global installs), use the manual command option or verify the exact command before allowing the agent to execute it.
功能分析
Type: OpenClaw Skill Name: clawmover-migration Version: 1.0.1 The skill facilitates system backup and restoration using an external CLI package (@clawmover/cli) and a third-party service (clawmover.com). While SKILL.md includes extensive defensive instructions, such as strict input validation for shell injection characters, sensitive data masking for 'dataSecretKey', and mandatory user confirmation before installation or execution, the skill inherently requires high-risk capabilities including shell command execution and local file system modification. Per the provided criteria, risky capabilities plausibly needed for the stated purpose are classified as suspicious.
能力标签
cryptocan-make-purchases
能力评估
Purpose & Capability
The name/description match the instructions: the skill guides backups/restores, checks for the clawmover CLI, validates inputs, and requires explicit confirmation before actions. No unrelated capabilities or credentials are requested.
Instruction Scope
SKILL.md stays within scope: it explains checks to run, input validation rules, and when to run or show commands. It does not instruct reading unrelated files, environment variables, or posting data to external endpoints beyond the expected clawmover site reference.
Install Mechanism
There is no install spec in the package (instruction-only). The runtime text references installing @clawmover/cli and correctly requires explicit user confirmation before installation. This is acceptable, but installing the CLI will fetch third-party code (e.g., from npm) — users should inspect that package/source before consenting.
Credentials
The skill requests no environment variables or host config paths. It accepts sensitive inputs (dataSecretKey, 6-digit codes) from the user but includes clear handling rules (masking, no logging, no storage). The sensitivity is proportional to the stated tasks.
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges or modify other skills/config. It explicitly disallows silent installs or silent execution, which keeps its privilege footprint minimal.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clawmover-migration
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clawmover-migration 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
**Version 1.0.1 Changelog – More cautious and explicit shared skill policies** - Added an examples.md file. - Switched to a conservative, confirm-first policy: no silent CLI installs, backups, or restores; always explain before acting. - Now validates all user inputs (instanceId, dataSecretKey, verification code, destPath) before generating or running commands. - Clarified that dataSecretKey must be treated as sensitive input and must not be echoed, logged, or unnecessarily repeated. - Offers manual command options before attempting agent-executed installs or migrations. - Always prefers simulated restores and warns about real environment changes. - Response style is more explicit, operational, and short; sensitive data is never echoed or leaked.
v1.0.0
Initial release of clawmover-migration skill for OpenClaw. - Automates OpenClaw migration operations from connected channels when SSH access is unavailable. - Verifies or installs the `clawmover` CLI automatically. - Guides users through backup and restore workflows, including email verification and pending operation resume. - Prefers safe test restores with `--dest-path` and provides clear operational summaries. - Handles input validation, error reporting, sensitive data, and plugin reinstall reporting. - Provides concise and actionable messaging throughout the process.
元数据
Slug clawmover-migration
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

OpenClaw Migration 是什么?

Shared OpenClaw skill for guiding ClawMover backup and restore workflows with explicit confirmation, input validation, and a manual-command-first execution p... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 128 次。

如何安装 OpenClaw Migration?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawmover-migration」即可一键安装,无需额外配置。

OpenClaw Migration 是免费的吗?

是的,OpenClaw Migration 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

OpenClaw Migration 支持哪些平台?

OpenClaw Migration 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 OpenClaw Migration?

由 tubo70(@tubo70)开发并维护,当前版本 v1.0.1。

💬 留言讨论