← Back to Skills Marketplace
OpenClaw Checkpoint - Personal AI Assistant Backup & Recovery (Github)
by
Anthony Francis
· GitHub ↗
· v1.0.5
2779
Downloads
2
Stars
10
Active Installs
6
Versions
Install in OpenClaw
/install openclaw-checkpoint
Description
Backup and restore OpenClaw workspace state and agents across machines using git. Enables disaster recovery by syncing SOUL.md, MEMORY.md, memory files, cron...
Usage Guidance
This package is instruction-only and contains no scripts — it expects you to clone or download code from a third-party GitHub repository and run an install script (the README even suggests curl | bash). Before installing: (1) confirm the external GitHub repo and author are trustworthy; the registry lists 'Source: unknown' which is a red flag for provenance; (2) inspect the install script and any scripts/checkpoint* files locally before executing them — avoid blindly piping remote content to bash; (3) verify the repo's .gitignore and a dry-run of what will be committed, so secrets (API keys, .env files) are not accidentally pushed; (4) prefer SSH auth or a minimally-scoped GitHub token; (5) be aware the installer will modify your PATH and may add a user cron or launchd job for scheduled backups; (6) if you do want this functionality, consider cloning the repo yourself, reviewing all scripts, and only then running the setup commands. Because of the mismatch between claimed CLI tools and the absence of bundled code plus the recommended remote-install pattern, proceed cautiously and audit the external code before use.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-checkpoint
Version: 1.0.5
The OpenClaw Checkpoint skill is designed for legitimate backup and restore operations, explicitly excluding sensitive data like API keys and warning users about private repositories. However, it is classified as 'suspicious' due to several high-risk capabilities inherent in its design: the recommended 'quick install' method involves `curl -fsSL ... | bash`, which is a significant supply chain risk. The skill also extensively uses powerful shell commands (`git`, `cp`, `rsync`, `sed`, `grep`, `crontab`, `launchctl`) for file system manipulation, network communication, and persistence (via cron/launchd). While these are necessary for its stated purpose, they represent a broad attack surface for potential shell injection vulnerabilities if not meticulously sanitized in the underlying scripts (which are not provided for analysis). There is no evidence of intentional malicious behavior like data exfiltration to unauthorized endpoints or obfuscation, but the combination of `curl | bash` and broad system interaction warrants caution.
Capability Assessment
Purpose & Capability
The SKILL.md and README describe command-line tools (checkpoint, checkpoint-setup, checkpoint-backup, etc.) and reference scripts under scripts/checkpoint*; however the published skill bundle contains only INSTALL.md, README.md, and SKILL.md (no scripts or binaries). That means the claimed capabilities depend on fetching code from an external GitHub repo rather than being self-contained — an incoherence between what the skill claims and what the package actually provides.
Instruction Scope
The instructions are focused on backing up ~/.openclaw/workspace and ~/.openclaw/agents/, exporting cron jobs, initializing a git repo, and pushing to a remote GitHub repo — all within the declared purpose. However the SKILL.md explicitly instructs users to run remote install scripts (curl ... | bash) and to modify user launchd/crontab entries and PATH. Those install/run instructions are operationally necessary for the described feature but expand the skill's runtime effects (file writes, scheduling changes, network pushes). The doc also relies on the user's GitHub credentials or SSH key and the openclaw CLI/gateway; these are expected but worth verifying before use.
Install Mechanism
No install spec is bundled; the README/INSTALL recommend either git clone from https://github.com/AnthonyFrancis/openclaw-checkpoint or piping a raw.githubusercontent.com script to bash. Requiring users to fetch and execute remote scripts (curl|bash) increases risk unless the repository and install script are audited. The raw.githubusercontent.com host is common, but piping to a shell runs arbitrary remote code without local inspection. Also the registry metadata lists 'Source: unknown' and no homepage, so provenance is unclear.
Credentials
The skill declares no required environment variables and does not request unrelated credentials. The operational workflow legitimately needs Git, GitHub authentication (SSH or a PAT), and the openclaw CLI/gateway — these are proportional to a backup/restore tool. The README states that API keys and OAuth tokens are excluded from backups, which is appropriate, but users should verify .gitignore and commit behavior before first push.
Persistence & Privilege
The skill does not request always:true and operates at user level. It may create user launchd plist entries (macOS) or add a user cron job (Linux) when scheduling auto-backups; this is reasonable for an opt-in backup scheduler. It does not claim to install system-wide daemons or require root privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-checkpoint - After installation, invoke the skill by name or use
/openclaw-checkpoint - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.5
openclaw-checkpoint v1.0.5
- Adds support for backing up and restoring agents (~/.openclaw/agents/) with workspace.
- Introduces new backup/restore flags: --workspace-only, --agents-only, and --agent <name> for granular control.
- Updates descriptions and help to reflect multi-agent support.
- checkpoint-status now reports agent backup status.
- More robust agent folder handling: skips gracefully if no agents found, strips nested .git dirs for portability.
v1.0.4
**Summary: Adds checkpoint-restore (checkpoint selection, rollback), help overview command, and improves disaster recovery workflows.**
- Introduced new checkpoint-restore command with interactive selection, checkpoint rollback options, --latest, and automatic cron job restore.
- Added checkpoint (help overview) command listing all available checkpoint commands and usage.
- Updated documentation to reflect new and renamed commands (e.g., checkpoint-restore replaces checkpoint-resume).
- Enhanced disaster recovery: easier onboarding/restore, explicit selection of backup to restore, and improved handling of uncommitted changes.
- checkpoint status, scheduling, backup, and setup usage unchanged. No code changes detected.
v1.0.3
Version 1.0.3
- No code or documentation changes detected in this release.
- All features and commands remain unchanged from the previous version.
- Internal SKILL.md or file structure is unmodified.
v1.0.2
openclaw-checkpoint 1.0.2
- Adds automatic backup of OpenClaw cron jobs to `memory/cron-jobs-backup.json` on each checkpoint-backup.
- Includes cron job sync as part of the backup and restore process (see `checkpoint-backup` and restore instructions).
- Updates command: `checkpoint` replaced by `checkpoint-backup` for explicit backup operation.
- Documentation in SKILL.md restructured and clarified for new and existing features.
- Description updated to reflect cron jobs and auto-backup improvements.
v1.0.1
Version 1.0.1
- Added interactive onboarding flow to checkpoint-resume for first-time users and new machines, including restore guidance and authentication setup.
- Improved checkpoint-resume to verify workspace state and guide through merge/replace options if local files exist.
- Updated documentation to clarify onboarding triggers and enhance restore instructions for new users.
v1.0.0
**Initial release of openclaw-checkpoint skill.**
- Provides backup and restore of OpenClaw workspace state across macOS and Linux machines using git and GitHub.
- Includes interactive onboarding (checkpoint-setup), manual and automated backup/restore commands, and health/status checks.
- Supports auto-backup scheduling (macOS launchd or Linux cron).
- Ensures key OpenClaw files (SOUL.md, MEMORY.md, config, scripts) are synced while excluding sensitive credentials.
- Offers setup/reset, authentication, schedule control, and safe migration commands for disaster recovery and workflow migration.
Metadata
Frequently Asked Questions
What is OpenClaw Checkpoint - Personal AI Assistant Backup & Recovery (Github)?
Backup and restore OpenClaw workspace state and agents across machines using git. Enables disaster recovery by syncing SOUL.md, MEMORY.md, memory files, cron... It is an AI Agent Skill for Claude Code / OpenClaw, with 2779 downloads so far.
How do I install OpenClaw Checkpoint - Personal AI Assistant Backup & Recovery (Github)?
Run "/install openclaw-checkpoint" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw Checkpoint - Personal AI Assistant Backup & Recovery (Github) free?
Yes, OpenClaw Checkpoint - Personal AI Assistant Backup & Recovery (Github) is completely free (open-source). You can download, install and use it at no cost.
Which platforms does OpenClaw Checkpoint - Personal AI Assistant Backup & Recovery (Github) support?
OpenClaw Checkpoint - Personal AI Assistant Backup & Recovery (Github) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw Checkpoint - Personal AI Assistant Backup & Recovery (Github)?
It is built and maintained by Anthony Francis (@anthonyfrancis); the current version is v1.0.5.
More Skills