Codex Owner Move Debug
ReviewAudited by ClawScan on May 8, 2026.
Overview
This instruction-only debug skill is clear about testing owner migration, but it tells the agent to create and transfer a skill to OpenClaw without defining approval, scope, or cleanup.
Install or invoke this only if you are intentionally testing OpenClaw owner migration and have permission to change ownership. Before any action, require an explicit user confirmation, use a clearly named disposable test skill, and define cleanup or rollback steps.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent following this could create or transfer a skill in a way that changes shared OpenClaw registry state.
This instructs the agent to perform a high-impact registry/account mutation, but the artifact does not bound the target skill, require explicit user approval, or define rollback before doing so.
Create the skill under a personal owner, then move it to OpenClaw with explicit migration intent.
Only use this in a controlled migration test, require explicit confirmation before any create or transfer action, and specify the exact test slug, owner, and rollback steps.
The agent may rely on privileged user or organization access to change ownership, which could affect shared assets if misapplied.
Moving a skill between a personal owner and OpenClaw implies use of delegated account or organization privileges, but the artifact does not specify which identity, role, or credential scope should be used.
under a personal owner, then move it to OpenClaw
Document the required account role, use least-privileged test credentials where possible, and require the user to approve any organization-level ownership change.
Users may assume temporary migration artifacts will be cleaned up even though the skill does not say how to do that.
The artifact claims explicit cleanup, but the shown procedure only says to create and move the skill and does not include cleanup instructions.
This temporary skill validates the owner migration flow during PR review with realistic text and explicit cleanup.
Add concrete cleanup instructions, including who can perform them, what should be deleted or moved back, and how to verify completion.