Migrator

• Analyzed: May 15, 2026, 3:21 AM
• Findings: 1
• Version: 1.1.0
• Hash: 92fd773ba1f035d3810e46ece1c263332bf05d66a5c39f05501bd6ad99a862e7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Migrator skill is designed to securely package and restore OpenClaw agent data. It implements strong security measures, including AES-256-GCM encryption with `scrypt` for key derivation (`src/archive.js`, `src/restore.js`), and explicit path traversal protection during archive extraction (`src/restore.js`). The skill's instructions in `SKILL.md` and `README.md` are purely descriptive and do not contain any prompt injection attempts. All file operations are local and aligned with the stated purpose of migrating agent configurations and data, with no evidence of data exfiltration, malicious execution, persistence, or obfuscation.