← Back to Skills Marketplace
dinghaibin

Backup Tool

by BIN · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
49
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install backup-tool
Description
Backup and restore files with compression and encryption. Use when user needs to backup important files, create scheduled backups, sync folders, encrypt sens...
README (SKILL.md)

Backup Tool

Backup and restore files with compression and encryption.

Quick Start

# Backup a folder
python scripts/backup.py /path/to/folder --output backup.tar.gz

# Restore
python scripts/backup.py --restore backup.tar.gz --destination /restored

Usage

python scripts/backup.py SOURCE [OPTIONS]

Options:
  --output PATH       Output backup file
  --compress FORMAT   Compression: gzip, bzip2, xz (default: gzip)
  --encrypt           Encrypt backup with password
  --restore PATH      Restore from backup
  --destination DIR   Restore destination
  --incremental      Create incremental backup
  --exclude PATTERN  Exclude pattern (can repeat)

Examples

# Simple backup
python scripts/backup.py ~/Documents --output docs-backup.tar.gz

# Encrypted backup
python scripts/backup.py ~/Important --output secure-backup.tar.gz --encrypt

# Incremental backup
python scripts/backup.py /data --output incremental --incremental

# Restore encrypted backup
python scripts/backup.py --restore secure-backup.tar.gz --destination /restored

Scheduling Backups

Add to crontab for automatic backups:

0 2 * * * python /path/to/backup.py /home --output /backup/daily.tar.gz

Features

  • Compression: gzip, bzip2, xz
  • AES-256 encryption
  • Incremental backups
  • Exclude patterns
  • Integrity verification
Usage Guidance
Do not assume this tool encrypts or performs incremental backups — the README claims AES-256 encryption and incremental features but the script lacks those implementations. The restore function uses tarfile.extractall(...) directly, which is vulnerable to path traversal (malicious or poorly formed archive members can write outside the destination). Exclude patterns are accepted as arguments but never applied, and integrity verification is only a printed SHA256 prefix (no verification on restore). If you plan to use this: (1) review and test it on harmless data first; (2) do not run restores as root and avoid restoring untrusted archives; (3) implement or use a safe extraction routine that prevents path traversal; (4) add real encryption (use standard tools/libraries like GPG or the python cryptography library) and proper verification on restore; (5) either fix the missing incremental/exclude logic or use a well-audited backup tool (rsync, borg, restic) for production. The inconsistencies are suspicious but not evidence of intentional malice — treat this as untrusted example code until it's audited and corrected.
Capability Analysis
Type: OpenClaw Skill Name: backup-tool Version: 1.0.0 The script 'scripts/backup.py' uses 'tarfile.extractall()', which is a known security risk vulnerable to directory traversal attacks (TarSlip) if a malicious archive is processed. Furthermore, there is a significant discrepancy between the 'SKILL.md' documentation, which claims features like AES-256 encryption and incremental backups, and the actual implementation in 'scripts/backup.py', which lacks these security and functional features.
Capability Assessment
Purpose & Capability
Name/description say AES-256 encryption, incremental backups, exclude patterns, and integrity verification, but the Python script only creates compressed tar archives and prints a SHA256 snippet. There is no encryption implementation, no incremental backup logic, and exclude patterns passed to the script are not applied. This mismatch between claimed capabilities and actual code is a substantive inconsistency.
Instruction Scope
SKILL.md instructs running the included script and scheduling via cron (which matches the script), but it documents options (--encrypt, --incremental, --exclude behavior, AES-256) that are not implemented by the script. The runtime instructions therefore mislead users about what will happen.
Install Mechanism
No install spec and no external dependencies; this is instruction-only with an included Python script. No downloads or package installs are requested.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That is proportional to its stated local-file backup purpose.
Persistence & Privilege
always is false and the skill does not request elevated persistence or modify other skills or system-wide agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install backup-tool
  3. After installation, invoke the skill by name or use /backup-tool
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Slug backup-tool
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Backup Tool?

Backup and restore files with compression and encryption. Use when user needs to backup important files, create scheduled backups, sync folders, encrypt sens... It is an AI Agent Skill for Claude Code / OpenClaw, with 49 downloads so far.

How do I install Backup Tool?

Run "/install backup-tool" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Backup Tool free?

Yes, Backup Tool is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Backup Tool support?

Backup Tool is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Backup Tool?

It is built and maintained by BIN (@dinghaibin); the current version is v1.0.0.

💬 Comments