openclaw-migration
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill performs local data migration between OpenClaw and Hermes directories. It handles sensitive information such as API keys only when explicitly requested via flags and implements logic to redact secrets from the migration reports and notes generated for the user.
- [INDIRECT_PROMPT_INJECTION]: The migration process ingests untrusted markdown data from the source environment into the agent's memory and soul configuration. This represents a standard surface for indirect prompt injection, though it is the expected behavior for a migration tool.
Audit Metadata