OpenClaw配置管理Skill

提供智能备份、恢复、迁移及Git版本控制，支持加密存储与权限管理的OpenClaw配置管理工具。

This skill's documentation describes operations that require Git credentials, SSH keys, and an encryption key and that perform privileged system actions, but the registry metadata doesn't declare those requirements. Before installing or running it: 1) verify the referenced GitHub repository (wisdom-wozoy/openclaw-config-manager) and review the code (especially scripts run by npm install and any scripts under scripts/); 2) do not export sensitive tokens or keys into a shell session for the agent without auditing who/what will use them; 3) run restore/migrate operations in an isolated/test environment first (never run sudo restores on production machines without inspection); 4) prefer granting least privilege (use a Git deploy key with limited scopes, ephemeral encryption keys, limited backup paths); and 5) ask the publisher to update the skill metadata to explicitly declare required environment variables and explain any privileged commands. If you cannot review the code, avoid giving the skill access to tokens, keys, or the ability to execute system-level commands.

Type: OpenClaw Skill Name: openclaw-config-manager-skill Version: 0.0.1 The skill bundle defines a configuration manager with high-privilege capabilities, including Git integration, SSH-based migration, and secrets management (SKILL.md). It explicitly handles sensitive credentials such as 'OPENCLAW_GIT_TOKEN' and 'OPENCLAW_GIT_SSH_KEY' and provides commands for remote data transfer via SSH and Git. While these features align with the stated purpose of the skill, the broad access to system configurations and credentials represents a significant attack surface for data exfiltration, especially as the implementation code (JS/scripts) is not provided for verification.