Launchthatbot Import

• Verdict: Pass
• Confidence: High
• Analyzed: Feb 25, 2026, 6:16 PM
• Findings: 0
• Version: 1.2.3

Overview

The skill's requested actions (reading agent config, memory, skills, and encrypting .env for a one-time push) are coherent with its stated purpose of migrating an OpenClaw agent to LaunchThatBot and do not request unrelated privileges or credentials.

This skill appears to do what it claims, but take these precautions before using it: 1) Verify the import token/session is generated from the official LaunchThatBot dashboard (confirm URL/domain) and never paste a token from an untrusted source. 2) Prefer air‑gapped mode if you are concerned about network transfer; with quick API mode verify the public key returned by import_handshake matches what the dashboard published. 3) Review the list of files/skills the tool will include (it reads your entire skills directory and .env) and remove or redact any secrets you do not want migrated. 4) Be aware that using 'npx' to run mcporter will fetch code from npm at runtime—ensure your environment's package sources are trusted. 5) Back up your agent files before exporting and, after import, verify secrets were placed only where you expect (your container's .env or your Convex instance). 6) If you are unsure about LaunchThatBot's trustworthiness, validate the upstream project/repository and operator before providing access or uploading bundles.