技能详情(站内镜像,无评论)
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.0.1
统计:⭐ 0 · 114 · 0 current installs · 0 all-time installs
⭐ 0
安装量(当前) 0
🛡 VirusTotal :良性 · OpenClaw :可疑
Package:anwhere/claw-clone
安全扫描(ClawHub)
- VirusTotal :良性
- OpenClaw :可疑
OpenClaw 评估
The skill generally does what it says (export/import agent configs) but it has several mismatches and risky behaviors (undeclared environment usage, naive sensitive-data filtering, and automatic skill installation) that warrant caution before installing.
目的
Name/description match the code: the script reads agent identity/config files, builds a shareable package, and can write files back and install skills on import. Reading OPENCLAW_WORKSPACE / OPENCLAW_DIR and listing skills is coherent with cloning/exporting an agent.
说明范围
SKILL.md and the script instruct reading many workspace files, writing/overwriting configs (with .bak backups), optionally importing MEMORY, and auto-installing listed skills. The export claims 'sensitive info filtered' but filtering is a simple key-based transformation and may miss secrets in other keys or embedded text. Auto-install on import happens without additional confirmation in the script, which expands the blast radius (it will invok…
安装机制
No install spec — instruction-only with a shipped script. There are no remote downloads or package installs declared. The script invokes a local command ('skillhub install') to add skills, which is expected for an importer, but that relies on external tooling and network access at runtime.
证书
Registry metadata declares no required env vars, but the script reads OPENCLAW_WORKSPACE and OPENCLAW_DIR from the environment (with defaults). This mismatch means the skill will access filesystem locations determined by env vars even though none are declared. The script can read arbitrary files under those paths (which may contain credentials), yet it does not declare or request credentials explicitly.
持久
The skill does not request 'always' privilege. It will overwrite agent identity/config files (with backups) and can install skills — actions that legitimately fit a cloning tool but are high-impact. Autonomous invocation is allowed by default; combined with auto-install behavior this increases risk if misused.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「OpenClaw Agent Clone」。简介:一键导出或导入小龙虾配置,支持配置共享与克隆,自动备份并过滤敏感信息,方便技能安装与应用恢复。。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/anwhere/claw-clone/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
# claw-clone - OpenClaw Agent Clone Skill
🦞 One-click export/import of OpenClaw agent configuration for sharing and cloning.
## Triggers
- "export" / "export config" / "export package" / "clone yourself"
- "import" / "import config" / "import package" / "clone"
- When user wants to share or obtain agent configuration
## Features
### Export Mode (claw-clone-out)
Export all key information of the current agent into a shareable package:
1. **Identity Files**
- IDENTITY.md - Identity definition
- SOUL.md - Soul/personality settings
- USER.md - User information
2. **Configuration Files**
- AGENTS.md - Agent rules
- HEARTBEAT.md - Heartbeat configuration
- TOOLS.md - Tools configuration
3. **Skills Information**
- List of installed skills with versions
4. **OpenClaw Configuration** (sensitive info filtered)
5. **Optional: Memory**
- Ask user whether to include MEMORY.md
### Import Mode (claw-clone-in)
Clone another agent's configuration from a provided package:
1. **Parse Package**
- Validate JSON format
- Check version compatibility
2. **Apply Configuration**
- Write all configuration and identity files
- Auto-backup original files (.bak suffix)
3. **Install Skills**
- Auto-install missing skills
4. **Generate Report**
- Show import results
## Usage
After triggering, the skill asks "export" or "import":
- **Export**: Generate package for user to copy and share
- **Import**: User pastes package content, auto-clone
## Sensitive Info Filtering
Auto-filtered on export:
- API keys, tokens, passwords, secrets
Manual config after import:
- API keys
- Channel credentials
- Other auth info
## Notes
- Import overwrites existing config (auto-backed up)
- Some configs require restart to take effect
- Some skills may need additional configuration