Skip to content

v1.11.0

Choose a tag to compare

View all tags
@napoleond napoleond released this 22 Feb 05:43
· 104 commits to main since this release
v1.11.0
1c10051

What's New

Backup command

New backup command for pushing and pulling agent identity and memory files (.md only) to ATXP servers. Agents can now preserve their SOUL.md, MEMORY.md, and other workspace files across environment rebuilds.

npx atxp backup push --path ~/.openclaw/workspace-abc/
npx atxp backup pull --path ~/.openclaw/workspace-abc/
npx atxp backup status

Separate skill file (atxp-backup) with its own security boundary since it reads/writes arbitrary directories.

Security hardening

  • Removed --token CLI examples from SKILL.md to prevent credential exposure in process listings and shell history
  • Added boundary markers guidance for untrusted output ([BEGIN/END UNTRUSTED CONTENT])
  • Added Financial Safety section with human-approval recommendations and spending guardrails
  • Added Runtime Execution Model section documenting npx download behavior and version pinning
  • Added top-level permissions field to frontmatter declaring all access requirements explicitly
  • Explicit rule against source-ing ~/.atxp/config
Assets 2
Loading