📦 Complete Agent Backup — 全代理备份
v1.0.0一键备份与还原 Hermes Agent 与 OpenClaw 的全部数据：配置、记忆、技能、会话及工作空间，支持多平台与可选加密，保障数据安全与快速迁移。
0· 83·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill largely matches a local backup/restore tool for Hermes/OpenClaw, but documentation claims (web UI, cloud/OAuth flows) are not implemented in the shipped scripts and the tool archives highly sensitive secrets — review the cloud-upload code and handle backups with care before using.
评估建议
This package is a local backup/restore tool and the scripts do what a backup tool should: copy configs, sessions, skills, databases, and credential files under ~/.hermes and ~/.openclaw. Before installing or running it, do the following: 1) Review the cloud-upload code (cloud-config.sh or any cloud upload implementation) — the SKILL.md mentions cloud/OAuth uploads but the shipped config script notes cloud setup is not yet implemented; if cloud upload is enabled later it could send all your secre...详细分析 ▾
ℹ 用途与能力
The name/description (backup/restore for Hermes and OpenClaw) align with the included scripts: backup.sh, restore.sh, and config.sh operate on ~/.hermes and ~/.openclaw and include options for encryption, incremental/full backups, and creating manifests. However SKILL.md advertises features (web-based management UI, a full cloud setup wizard/OAuth flows) that are not present or are explicitly marked as 'not yet implemented' in config.sh; this is an inconsistency between claims and actual capability.
ℹ 指令范围
Runtime instructions and scripts operate on user home data (config files, .env, credentials directories, session histories, installed skills, state.db) — this is expected for a backup tool but means the skill reads and archives highly sensitive secrets (API keys, tokens, auth.json, .env). The scripts use standard local commands (tar, rsync, openssl, pkill, python3). They create temporary archives and a safety pre-restore backup. No unexpected external endpoints are shown in the provided scripts, but the cloud-upload path is truncated/unclear; enabling cloud upload could transmit sensitive data externally.
✓ 安装机制
No install spec is provided (instruction-only with included shell scripts). Nothing is downloaded during install in the package itself. This is lower-risk than arbitrary remote installers, but you must inspect the scripts before running.
ℹ 凭证需求
The skill does not request environment variables or credentials at install, which is appropriate. However, it intentionally reads and copies secret-bearing files (~/.hermes/.env, openclaw.json, credentials directories, auth.json). That behavior is proportional to a backup tool but materially increases risk: any cloud upload or misconfigured backup location could expose API keys and tokens. SKILL.md shows cloud setup flows asking for AWS/GDrive/Dropbox credentials; config.sh indicates cloud setup is not implemented yet, so it's unclear how and where those credentials would be used or stored.
✓ 持久化与权限
The skill is not always-enabled and is user-invocable. It writes a self config file under ~/.hermes-backup and creates archives in user-specified locations. It does not request system-wide privileges or modify other skills. Scheduling features are mentioned but the provided scripts do not automatically register persistent system-wide services.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/27
Initial release of Hermes Backup — a universal backup and restore tool for Hermes Agent and OpenClaw. - Supports full and incremental backups with flexible retention policies. - Optional AES-256 encryption for secure, password-protected archives. - Cloud storage integration: S3, Google Drive, and Dropbox. - Integrity verification for backup files. - Web-based management UI for creating, restoring, and configuring backups. - Interactive setup and scheduling for automatic backups. - Cross-platform: compatible with both Hermes and OpenClaw installations.
● 可疑
安装命令
点击复制官方npx clawhub@latest install complete-agent-backup
镜像加速npx clawhub@latest install complete-agent-backup --registry https://cn.longxiaskill.com