← Back to Skills Marketplace
vacinc

Simple Backup

by VACInc · GitHub ↗ · v2.2.0
cross-platform ⚠ suspicious
6861
Downloads
4
Stars
0
Active Installs
9
Versions
Install in OpenClaw
/install simple-backup
Description
Backup agent brain (workspace) and body (state) to local folder and optionally sync to cloud via rclone.
Usage Guidance
Review or fix this skill before installing. At minimum, remove or pin the unnecessary npm dependencies, validate retention settings as decimal integers, pass the GPG password through a safer channel such as a file descriptor or agent, add cleanup traps and restrictive permissions for temporary files, and confirm exactly what state, credentials, and rclone destination will be included.
Capability Analysis
Type: OpenClaw Skill Name: simple-backup Version: 2.2.0 The skill bundle is benign. The `simple-backup.sh` script accurately reflects its stated purpose of backing up OpenClaw agent data (workspace, state, skills). It accesses necessary configuration files (`~/.openclaw/openclaw.json`) and sensitive data (agent directories, and potentially a backup password from `~/.openclaw/credentials/backup.key`) but uses this data for legitimate encryption via GPG and local storage, or syncing to a user-configured `rclone` remote. There is no evidence of unauthorized data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md`. All file and network operations are directly aligned with the backup functionality.
Capability Assessment
⚠ Credentials
Reading workspace, state, and skills is purpose-aligned for a full backup tool, but the implementation stages plaintext copies in temporary directories without an early cleanup trap and passes the backup password on the gpg command line.
⚠ Install Mechanism
package.json declares wildcard npm dependencies on rclone and gpg even though the script calls system binaries. These unpinned and apparently unnecessary dependencies expand install-time supply-chain exposure.
ℹ Instruction Scope
The runtime instructions are mostly disclosed in SKILL.md, including password sources, backup paths, retention settings, and optional rclone remote sync. There is no evidence of prompt hijacking, hidden role changes, or unrelated agent instructions.
⚠ Persistence & Privilege
The skill does not install persistent services or hooks, but it deletes older backup files and uses unvalidated retention configuration in shell arithmetic, creating a command-execution risk if an attacker can modify environment or OpenClaw config values.
ℹ Purpose & Capability
The backup behavior is coherent with the stated purpose: it backs up workspace, OpenClaw state, and skills, encrypts archives, prunes old backups, and optionally syncs via rclone. The scope includes potentially sensitive configuration and credentials, so users must treat backups as sensitive.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install simple-backup
  3. After installation, invoke the skill by name or use /simple-backup
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.2.0
Added manual override support for custom setups. Priority: config → env → auto-detect. All paths now overridable via skill config.
v2.1.0
Auto-detects workspace from agents.defaults.workspace and state from ~/.openclaw. Only skillsDir needs manual config. Tested and working.
v2.0.0
BREAKING: Now uses skill config block for paths instead of hardcoded values. Configure workspaceDir, stateDir, skillsDir in openclaw.json. Fully portable across installations.
v1.0.5
Updated to use openclaw directories instead of clawdbot
v1.0.4
Update metadata and paths: clawdbot → openclaw
v1.0.3
Renamed script to .sh extension to ensure inclusion.
v1.0.2
Fixed missing binary script in package.
v1.0.1
Restricted rclone cloud sync to only upload .gpg files (--include *.gpg).
v1.0.0
- Initial release of simple-backup, a robust backup script for workspace and state. - Stages, compresses, and AES256-encrypts backups with GPG. - Supports automatic backup pruning and retention policies (daily/hourly). - Optionally syncs backups to cloud storage using rclone. - Flexible configuration via environment variables and optional password/keyfile support.
Metadata
Slug simple-backup
Version 2.2.0
License —
All-time Installs 0
Active Installs 0
Total Versions 9
Frequently Asked Questions

What is Simple Backup?

Backup agent brain (workspace) and body (state) to local folder and optionally sync to cloud via rclone. It is an AI Agent Skill for Claude Code / OpenClaw, with 6861 downloads so far.

How do I install Simple Backup?

Run "/install simple-backup" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Simple Backup free?

Yes, Simple Backup is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Simple Backup support?

Simple Backup is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Simple Backup?

It is built and maintained by VACInc (@vacinc); the current version is v2.2.0.

💬 Comments