Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

agent-teleport

v1.0.0

Seamlessly migrate your agent's configuration and memory to a new machine using TiDB Zero.

0· 712·1 current·1 all-time
byLux@lilyjazz

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for lilyjazz/agent-teleport.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "agent-teleport" (lilyjazz/agent-teleport) from ClawHub.
Skill page: https://clawhub.ai/lilyjazz/agent-teleport
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: TIDB_HOST, TIDB_PORT, TIDB_USER, TIDB_PASSWORD
Required binaries: python3, curl
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install lilyjazz/agent-teleport

ClawHub CLI

Package manager switcher

npx clawhub@latest install agent-teleport
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description align with requesting TiDB access and using Python/curl. Requesting TIDB_* env vars and using python3/curl is coherent for storing/restoring state in TiDB. Minor surprise: the skill will pack the entire current working directory (not a scoped agent-only store), which may include unrelated sensitive files.
!
Instruction Scope
Runtime instructions and included run.py will walk the current working directory, create an in-memory tar.gz of everything not matching a short ignore list, and upload it to a remote TiDB instance. If env vars are absent, the code auto-provisions by POSTing to https://zero.tidbapi.com/v1alpha1/instances via curl. The SKILL.md mentions auto-provisioning but does not fully call out that your entire CWD can be transmitted to a third party or that restore will overwrite files in the destination directory.
Install Mechanism
Instruction-only install (no remote downloads). The package includes run.py and a requirements.txt (pymysql). No external archives or obscure download URLs. The code does call subprocess to run curl but does not pull arbitrary code from unknown hosts.
Credentials
Requested env vars (TIDB_HOST, TIDB_PORT, TIDB_USER, TIDB_PASSWORD) are appropriate for a DB-backed migration tool. However, auto-provisioning when those are not supplied means the skill will contact an external API and may store your workspace on a remote service without you providing credentials — a behavior you should explicitly consent to. The skill does not request unrelated credentials.
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges or modify other skills. It writes/extracts files into the current working directory only (can overwrite files) but does not change system configuration or other skill settings.
What to consider before installing
This skill WILL upload the contents of whatever directory you run it from into a TiDB instance (either one you provide via TIDB_* env vars or a temporary instance it attempts to create). Before installing or running: 1) Review run.py yourself and ensure you understand which files will be included; consider running it from a clean, empty directory or a prepared export directory. 2) Prefer supplying your own TiDB credentials (TIDB_HOST, TIDB_PORT, TIDB_USER, TIDB_PASSWORD) rather than relying on auto-provision; confirm the target DB is under your control. 3) Don't run from your home directory or any directory that may contain secrets (SSH keys, cloud credentials, .env files) — the IGNORE_PATTERNS are not exhaustive. 4) Back up the destination system before running restore: the restore extracts into the current dir and can overwrite files. 5) If you must use auto-provisioning, verify the API endpoint (zero.tidbapi.com) and its privacy/authorization model — auto-provision may result in your data being stored on a third party. 6) Consider encrypting the archive or using a trusted transport before uploading if your data is sensitive. If you are not comfortable with any of the above, do not run the skill.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🛸 Clawdis
Binspython3, curl
EnvTIDB_HOST, TIDB_PORT, TIDB_USER, TIDB_PASSWORD
latestvk97a9vbvzfp50227nvp1178e9581k08e
712downloads
0stars
3versions
Updated 39m ago
v1.0.0
MIT-0

Agent Teleport (Powered by TiDB Zero)

Overview

Agent Teleport is a migration utility that allows your AI Agent to transfer its entire state (memory, configuration, and workspace files) from one machine to another instantly.

Security & Provisioning

  1. Bring Your Own Database (Recommended): Set TIDB_* environment variables.
  2. Auto-Provisioning (Fallback): If no credentials are found, this skill uses the TiDB Zero API to create a temporary database for the transfer. The connection string is returned as the "Restore Code".

Prerequisites

  • Move freely: Switch from your office desktop to your laptop without losing context.
  • Backup: Create an instant snapshot of your agent's brain before trying risky operations.
  • Clone: Duplicate your agent's configuration to a new instance.

Prerequisites

This skill requires a TiDB Cloud account. The agent will automatically provision a free serverless cluster using the provided credentials.

  • Environment Variables:
    • TIDB_HOST
    • TIDB_PORT
    • TIDB_USER
    • TIDB_PASSWORD

Usage

1. Pack (Source Machine)

To save your current state and generate a restore code:

python {baseDir}/run.py --action pack

Output: A connection string (DSN) or a short code.

2. Restore (Destination Machine)

To load the state on a new machine:

python {baseDir}/run.py --action restore --dsn "mysql+pymysql://..."

Security Note

The temporary database created by this skill is ephemeral. It is recommended to delete the cluster after restoration if it contains sensitive data.

Comments

Loading comments...