by 安全扫描
OpenClaw
安全
high confidenceThe skill's scripts, instructions, and requirements are coherent for a local ~/.openclaw backup/restore tool; nothing requested or installed is disproportionate to that purpose.
评估建议
This skill appears to do what it says: bundle ~/.openclaw into portable tar.gz archives and restore them with integrity checks. Before installing or running: 1) inspect any existing ~/.openclaw contents you plan to bundle (backups will include those files); 2) be aware the scripts will read $HOME and may be influenced by optional environment overrides (OPENCLAW_SOURCE_DIR, OPENCLAW_RESTORE_TARGET, and the documented OPENCLAW_SNAPSHOT_* variables); 3) set the backup directory to an absolute path ...详细分析 ▾
✓ 用途与能力
The name/description match the provided scripts: create, list, configure, and restore self-contained tar.gz bundles of ~/.openclaw. Required files and behaviors (reading $HOME, writing bundles to a user-specified backup directory, storing config in config.env) are appropriate for a backup tool.
ℹ 指令范围
Runtime instructions direct the agent to run local shell scripts that only operate on local paths and the backup directory. The scripts do not perform network calls or access unrelated system configuration. Two environment variables used by the scripts (OPENCLAW_SOURCE_DIR and OPENCLAW_RESTORE_TARGET) are not mentioned in SKILL.md's 'Public defaults vs local overrides' section — SKILL.md documents OPENCLAW_SNAPSHOT_DIR but not these two optional overrides. This is a minor documentation mismatch (the variables are plausible override hooks) but worth noting.
✓ 安装机制
There is no install spec and no external downloads. The skill is instruction-only with included scripts; no network-based installation or archive extraction from remote URLs is present.
✓ 凭证需求
The skill requests no credentials and no privileged environment access. It relies on standard environment variables and the user's $HOME. It will read and bundle whatever is in the source directory (by default ~/.openclaw), which is expected for a backup utility.
✓ 持久化与权限
always is false and the skill does not request persistent global privileges or modify other skills. It writes a local config.env in the skill directory when using set_backup_dir.sh, which is consistent with the described configuration model.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/16
Initial public release: unified OpenClaw backup and restore skill with public-safe defaults, bundle auditing, and configurable local snapshot storage.
● Pending
安装命令
点击复制官方npx clawhub@latest install bookers-openclaw-backup
镜像加速npx clawhub@latest install bookers-openclaw-backup --registry https://cn.longxiaskill.com 镜像可用