by 安全扫描
OpenClaw
安全
high confidence该技能的文件、指令和请求的操作与其声明的目的相符（选择性迁移 EasyClaw 设置到 OpenClaw）。仅读写用户配置文件在主目录下，无网络或秘密信息泄露行为。
评估建议
该技能如其所言：检查 EasyClaw/OpenClaw 配置文件并可选应用保守合并。运行前建议：1) 先运行报告脚本并审查输出；2) 确认是否迁移认证令牌；3) 保留自动生成的备份；4) 如有顾虑，自行审查仅读写本地文件的 Python 脚本。若不想移动令牌，请编辑映射或不使用 --apply。...详细分析 ▾
✓ 用途与能力
Name/description, SKILL.md, mapping reference, and the two included scripts all focus on locating EasyClaw and OpenClaw config files in the user's home directory and performing a conservative selective merge. Required binaries/env/configs are none, which is consistent with a local file-merge tool.
✓ 指令范围
Runtime instructions only tell the agent/operator to run the included report and merge scripts which: read specific files under the user's home directory, print redacted summaries, and optionally write a backup and updated ~/.openclaw/openclaw.json when --apply is used. The SKILL.md explicitly warns to redact secrets and to prefer dry runs. There are no instructions to read unrelated system files, contact external endpoints, or collect broad system context.
✓ 安装机制
This is an instruction-only skill with included scripts and no install spec or remote downloads. Nothing is written to disk by an installer; the only writes happen when the user runs the provided merge script with --apply (explicit and documented).
ℹ 凭证需求
The skill requests no environment variables or credentials. It will read and (when applied) write config files under the user's home directory and may copy tokens present in those files (gateway.auth.token is included in the auto-mappings). Copying tokens is coherent with migration purpose but is sensitive behavior — the SKILL.md and scripts do redact output for reporting, which is appropriate. Users should verify they want auth tokens migrated before applying.
✓ 持久化与权限
The skill is not always-enabled and is user-invocable only. It does not change other skills or global agent settings. The only persistent side-effects are backup creation and writing to ~/.openclaw/openclaw.json when the operator explicitly runs the script with --apply.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/3/11
初始发布：检查和选择性迁移 EasyClaw 运行时配置到 OpenClaw，带备份感知合并助手。
● 无害
安装命令 点击复制
官方npx clawhub@latest install easyclaw-config-migration
镜像加速npx clawhub@latest install easyclaw-config-migration --registry https://cn.clawhub-mirror.com
技能文档
工作流
1. 检查和比较
运行：python3 scripts/report_easyclaw_config.py
2. 审查迁移映射
3. 应用选择性合并
运行（干跑先）：python3 scripts/merge_easyclaw_config.py --apply
4. 验证和总结
注意事项
- 敏感信息处理
- 配置文件存在判断
- 合并策略
- 备份重要性
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制