Skills/ClawHub/workspace-cross-drive-migration

workspace-cross-drive-migration@1.0.2

VERIFIED

Publisher claims: "把 WorkBuddy 工作空间整体迁移到另一个磁盘（例如 D 盘搬到移动硬盘以节省空间），并保留会话历史、项目记忆、项目级技能、自动化绑定与侧边栏显示名，迁移后做到无缝衔接。当用户说「工作空间搬家/迁移到移动硬盘/换盘/C盘D盘空间不够/把项目挪个位置/迁移后历史对话不见了/路径改了会话丢了」时使用。适用于 Windows 上的 WorkBuddy/CodeBuddy 工作空间，支持迁移前体检、执行、核对与回滚四个阶段，全程不删除源文件。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher katyperry13 · joined 6 days agoInstalls 96Last detonated 6d ago
$clawhub install workspace-cross-drive-migration
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
Python subprocess execution detectedscripts/ws_migrate_common.py:288 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/apply_migration.py:58 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Destructive file system command detectedSKILL.md:143 · Destructive file system command detectedFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05