by 安全扫描
OpenClaw
可疑
medium confidence该技能的指令大致符合迁移目的，但包含多个风险和不一致元素（未声明的凭证请求、下载和执行外部云存储脚本、明文密码和破坏性文件系统操作），运行前需谨慎。
评估建议
["运行前，请勿直接粘贴凭证或运行下载的 Python 脚本，先下载并本地查看脚本内容。","优先使用 SSH 密钥访问而非 sshpass/明文密码，避免在命令行中传递密码。","验证 COS URL，并从提供者请求校验和或签名的发布，直到验证前将脚本视为不可信任。","确保云 SecretId/SecretKey 对具有最小权限（仅授予必要的腾讯政策），并在使用后旋转凭证。","备份目标实例（并在非生产系统上测试），因为该过程会覆盖 `/root/.openclaw` 并重启服务。","如果您不适应审计外部脚本或执行特权操作，请请求提供代码透明或经过审查的安装程序。"]...详细分析 ▾
ℹ 用途与能力
The name/description (migrating OpenClaw to Tencent Cloud) aligns with the actions described (single-instance local migration, batch migration to Tencent Cloud). However, the skill metadata declares no required credentials or env vars while the SKILL.md clearly asks for SSH credentials and cloud API keys for batch migration — an inconsistency between declared requirements and runtime instructions.
⚠ 指令范围
Runtime instructions tell the operator to install packages (apt install sshpass), stop remote services, tar and scp files from remote /root, overwrite local /root/.openclaw, edit configuration files, and restart openclaw. Those operations are powerful and destructive (stop remote service, overwrite local data). The SKILL.md also instructs collecting and entering plaintext passwords and cloud SecretId/SecretKey values. The instructions go beyond passive guidance and include exact commands that will change system state and handle sensitive secrets.
⚠ 安装机制
Although this is instruction-only, the batch workflow directs users to download and run a Python script from a Tencent COS URL (https://go2tencentcloud-1251783334.cos.ap-guangzhou.myqcloud.com/others/claw2tencentcloud.py). Downloading and executing arbitrary scripts from a cloud bucket is high risk because the script's contents are not included in the skill and could perform actions unrelated to the stated task. The install mechanism is not a vetted release host (e.g., GitHub releases or an official project site) and the skill offers no integrity checks (hash/signature).
⚠ 凭证需求
The SKILL.md requires SSH username/password for source instances and (for batch mode) source and target cloud SecretId/SecretKey pairs — these are plausible and necessary for cross-account migration. However, the skill metadata declared no required env vars or primary credential, which is inconsistent. Also, using sshpass to pass plaintext passwords on the command line and requesting full cloud API keys (potentially with broad policies) increases attack surface; least-privilege guidance or scoped roles are not provided.
ℹ 持久化与权限
The skill does not request always:true and is instruction-only, so it does not persist as a long-lived component. Still, the instructions require privileged operations on the host (installing packages, writing to /root, restarting services) and use credentials that grant broad access — these are high-privilege actions at runtime even if the skill itself is non-persistent.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/26
无功能变化，仅进行了文档的微调。- 澄清批量迁移应从脚本生成的结果文件中收集汇总输出。- 功能、界面和支持场景无变化。
● 可疑
安装命令 点击复制
官方npx clawhub@latest install claw2tencentcloud
镜像加速npx clawhub@latest install claw2tencentcloud --registry https://cn.clawhub-mirror.com
技能文档
帮助用户将 OpenClaw 数据迁移到腾讯云实例，支持单实例迁移、批量迁移和自定义迁移方案。... （以下内容保持原文，仅示例）
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制