skills$openclaw/migrator
wenjie20241.9k

by wenjie2024

migrator – OpenClaw Skill

migrator is an OpenClaw Skills integration for security workflows. Securely migrate OpenClaw Agent (config, memory, skills) to a new machine.

1.9k stars2.5k forksSecurity L1
Updated Feb 7, 2026Created Feb 7, 2026security

Skill Snapshot

namemigrator
descriptionSecurely migrate OpenClaw Agent (config, memory, skills) to a new machine. OpenClaw Skills integration.
ownerwenjie2024
repositorywenjie2024/migrator
languageMarkdown
licenseMIT
topics
securityL1
installopenclaw add @wenjie2024/migrator
last updatedFeb 7, 2026

Maintainer

wenjie2024

wenjie2024

Maintains migrator in the OpenClaw Skills directory.

View GitHub profile
File Explorer
24 files
.
src
archive.js
3.4 KB
generate_mock.js
1003 B
index.js
2.5 KB
restore.js
6.2 KB
test_path_healing.js
2.8 KB
test-run
path-healing-test
restored
source
clawd
MEMORY.md
6 B
manifest.json
177 B
source
clawd
MEMORY.md
6 B
restored
clawd
MEMORY.md
60 B
manifest.json
85 B
_meta.json
272 B
package.json
669 B
README.md
2.6 KB
SKILL.md
927 B
SKILL.md

name: migrator description: Securely migrate OpenClaw Agent (config, memory, skills) to a new machine.

OpenClaw Migrator

A utility to package an Agent's state into a portable, encrypted archive (.oca) for migration.

Features

  • Encrypted Archive: Uses AES-256-GCM + auth tag for confidentiality and integrity.
  • Path Normalization: Restores workspace path using manifest.json metadata.
  • Dependency Manifest: Captures system dependencies (Brewfile) to ensure the new environment matches.

Usage

Export (On Old Machine)

migrator export --out my-agent.oca --password "secret"

Import (On New Machine)

migrator import --in my-agent.oca --password "secret"

Security

This skill handles sensitive data (openclaw.json, auth.token). The export process always requires a password to encrypt the archive. Unencrypted exports are disabled by design.

README.md

OpenClaw Migrator 📦

English | 中文


<a name="english"></a>

English

Securely migrate your OpenClaw Agent (config, memory, skills) between machines.

🚀 Features

  • 🔒 High Security: Uses AES-256-GCM encryption with integrity verification.
  • 🛣️ Cross-Generation Compatibility (v1.1.0): Supports seamless migration from legacy ~/.clawdbot to the new ~/.openclaw standard.
  • 🛣️ Path Self-healing: Automatically repairs absolute paths and workspace roots during restoration to ensure zero-config restarts.
  • 📦 Smart Packaging: Captures host metadata (node, platform, arch) to prevent runtime mismatches on the new machine.

🆕 What's New in v1.1.0

  • Rebrand Ready: Fully compatible with OpenClaw 2026.2.x rebrand and path migrations.
  • Security Hardening: Integrated Path Traversal filtering in restore.js to prevent malicious archive extraction.
  • Environment Manifest: Injects system context into .oca archives for smarter pre-flight checks.
  • Deep Path Healing: Recursively repairs absolute paths in openclaw.json when $HOME changes.

🛠️ Installation

git clone https://github.com/anchor-jevons/openclaw-migrator
cd openclaw-migrator
npm install
npm link

📖 Usage

Export (Old Machine):

migrator export -o my-agent.oca --password "your-secret-password"

Import (New Machine):

migrator import -i my-agent.oca --password "your-secret-password"

<a name="中文"></a>

中文

安全地在不同机器之间迁移您的 OpenClaw 智能体(配置、记忆、技能)。

🚀 功能特性

  • 🔒 高安全性:采用 AES-256-GCM 加密算法,并具备数据完整性校验。
  • 🔄 跨版本兼容 (v1.1.0):支持从旧版 ~/.clawdbot 到新版 ~/.openclaw 的平滑迁移。
  • 🛣️ 路径自愈:在恢复过程中自动修正绝对路径(如 workspace 根目录),确保迁移后无需手动修改配置。
  • 📦 环境感知:自动捕获宿主机元数据(Node版本、平台、架构),防止目标环境不兼容。
  • 🛡️ 安全加固:内置路径遍历(Path Traversal)防御,拦截恶意归档文件。

🛠️ 安装方法

git clone https://github.com/anchor-jevons/openclaw-migrator
cd openclaw-migrator
npm install
npm link

📖 使用指南

导出 (旧机器):

migrator export -o my-agent.oca --password "你的加密密码"

导入 (新机器):

migrator import -i my-agent.oca --password "你的加密密码"

⚖️ License

MIT

Permissions & Security

Security level L1: Low-risk skills with minimal permissions. Review inputs and outputs before running in production.

This skill handles sensitive data (`openclaw.json`, `auth.token`). The export process **always** requires a password to encrypt the archive. Unencrypted exports are **disabled** by design.

Requirements

  • OpenClaw CLI installed and configured.
  • Language: Markdown
  • License: MIT
  • Topics:

FAQ

How do I install migrator?

Run openclaw add @wenjie2024/migrator in your terminal. This installs migrator into your OpenClaw Skills catalog.

Does this skill run locally or in the cloud?

OpenClaw Skills execute locally by default. Review the SKILL.md and permissions before running any skill.

Where can I verify the source code?

The source repository is available at https://github.com/openclaw/skills/tree/main/skills/wenjie2024/migrator. Review commits and README documentation before installing.