← Back to Skills Marketplace
Coding Agent Backup
by
nickchan0412
· GitHub ↗
· v1.0.0
3166
Downloads
1
Stars
37
Active Installs
1
Versions
Install in OpenClaw
/install coding-agent-backup
Description
Delegate coding tasks to Codex, Claude Code, or Pi agents via background process. Use when: (1) building/creating new features or apps, (2) reviewing PRs (sp...
Usage Guidance
Install only after reviewing and constraining it. Do not paste private code or secrets into it unless you accept transmission to Google/Gemini, rotate or remove the embedded API key, avoid --yolo, use disposable worktrees or clones, and manually review diffs before any commit, push, PR, or GitHub comment.
Capability Analysis
Type: OpenClaw Skill
Name: coding-agent-backup
Version: 1.0.0
The skill is classified as suspicious due to two critical security vulnerabilities. Firstly, the `SKILL.md` instructions explicitly direct the OpenClaw agent to use the `--yolo` flag with the `codex` tool, which disables sandboxing and approval mechanisms, creating a severe risk of arbitrary code execution on the host system without oversight if the agent is compromised. Secondly, the `index.js` file contains a hardcoded Google Gemini API key (`AIzaSyCKWmPmAkZWvI2KiblawWPUESyCp9dEjk0`), which is a significant information security flaw as it exposes credentials that could be misused.
Capability Assessment
Purpose & Capability
The documented purpose is delegation to Codex, Claude Code, OpenCode, or Pi in local workdirs, but index.js implements a stdin-driven Gemini client and transmits user prompts to generativelanguage.googleapis.com.
Instruction Scope
The instructions normalize background agents, --full-auto, --yolo with no sandbox or approvals, GitHub comments, commits, pushes, and PR creation; some of this fits coding delegation, but the examples lack strong review gates.
Install Mechanism
The package includes an executable JavaScript implementation with undisclosed outbound network behavior and a hardcoded Google API key, while the visible requirements only mention local coding-agent binaries.
Credentials
config.json enables code running and file management with a fixed /home/admin/code workdir, which is broad for a delegation helper and not tightly aligned with the documentation's path-safety guidance.
Persistence & Privilege
Long-running background sessions are disclosed, but the skill also tells spawned agents to trigger an OpenClaw system event on completion and encourages parallel autonomous sessions with mutation authority.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install coding-agent-backup - After installation, invoke the skill by name or use
/coding-agent-backup - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
coding-agent-backup 1.0.0
- Initial release of the coding-agent skill.
- Enables background delegation of coding tasks to Codex, Claude Code, or Pi agents using a bash-first workflow.
- Strong emphasis on pty:true (pseudo-terminal) requirement for all interactive coding agent sessions.
- Supports spawning agents in arbitrary work directories for tasks like building features, code review (in temp dirs), and refactoring.
- Provides detailed CLI usage patterns, process monitoring actions, and parallel workflow strategies with git worktrees.
- Includes clear usage boundaries: not for simple fixes, general code reading, or work in ~/clawd workspace.
Metadata
Frequently Asked Questions
What is Coding Agent Backup?
Delegate coding tasks to Codex, Claude Code, or Pi agents via background process. Use when: (1) building/creating new features or apps, (2) reviewing PRs (sp... It is an AI Agent Skill for Claude Code / OpenClaw, with 3166 downloads so far.
How do I install Coding Agent Backup?
Run "/install coding-agent-backup" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Coding Agent Backup free?
Yes, Coding Agent Backup is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Coding Agent Backup support?
Coding Agent Backup is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Coding Agent Backup?
It is built and maintained by nickchan0412 (@nickchan0412); the current version is v1.0.0.
More Skills