← Back to Skills Marketplace
OpenClaw State Backup
by
Danielwangyy
· GitHub ↗
· v1.0.2
· MIT-0
310
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install openclaw-state-backup
Description
Create, inspect, and restore versioned OpenClaw state backups with rollback safety. Use when backing up or migrating OpenClaw memory, workspace state, gatewa...
Usage Guidance
This skill appears to implement the stated backup/restore functionality, but take care before using it on important data:
- The included scripts will read and write files under your home (~/.openclaw) and the provided workspace path; backups can contain sensitive data (including local skills). Treat output .tar.gz files as sensitive and store/encrypt them appropriately.
- The restore script distributed here appears truncated/buggy: the shipped file ends mid-function and the final_report construction refers to an undefined variable (likely a bug: 'warning' vs 'warnings'). Expect runtime failures on a real restore. Do NOT rely on this restore script for production restores until the code is fixed and fully tested.
- There are logic bugs (e.g., comparisons of paths when computing 'missingFromArchive' may not match due to differing string forms). Review and test both backup and restore with --verify-only and --dry-run on non-production data first.
- Prefer encrypting archives at creation or storing them in a secure location, since archives are unencrypted by default.
- If you want to proceed, ask the author for a corrected restore_state.py (complete file), or locally fix the undefined variable and test full/dry-run flows. Also audit any archived workspace/skills content for secrets before shipping archives off-host.
If the author supplies a complete, corrected restore script and tests showing successful dry-run and real restores, that would increase confidence and could move the classification to 'benign'.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-state-backup
Version: 1.0.2
The skill provides comprehensive backup and restore functionality for OpenClaw state but contains a significant security vulnerability. Specifically, `scripts/restore_state.py` utilizes `tar.extractall()` without path validation or security filters, making the system vulnerable to directory traversal (ZipSlip) attacks if a malicious archive is processed. Additionally, `scripts/backup_state.py` collects and stores system metadata, including the host's hostname and platform details, within the backup manifest.
Capability Assessment
Purpose & Capability
Name/description match the included scripts and instructions. The scripts enumerate and archive OpenClaw runtime and workspace paths (state dir and workspace), build a manifest, compute checksums, and provide restore/dry-run behavior — all consistent with a state backup/restore tool.
Instruction Scope
SKILL.md restricts behavior to creating/verifying/restoring archives and describes safety rules. The scripts read/write files under the user's home and workspace (e.g., ~/.openclaw, workspace/*, workspace/skills/). This is expected for a backup tool, but means backups may include sensitive user data and local skill code. No network exfiltration or unexpected external endpoints are present in the instructions or code.
Install Mechanism
Instruction-only with included Python scripts; no install spec, no external downloads, and no package install steps. This is the lowest install risk and aligns with the skill's purpose.
Credentials
The skill requests no environment variables or credentials, and only accesses local filesystem and basic system info (hostname, platform). That access is appropriate for a backup/restore tool, but the set of files it copies (including workspace/skills/) can contain secrets; archives are produced unencrypted, so secure handling of generated archives is necessary.
Persistence & Privilege
Skill is not always-enabled and does not request elevated persistence. It does create rollback archives and write reports to disk (expected behavior). It does not attempt to change other skills' configs or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-state-backup - After installation, invoke the skill by name or use
/openclaw-state-backup - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
Add MIT license and improve README/project homepage presentation.
v1.0.1
Improve README and project presentation for public open-source release.
v1.0.0
Initial release of openclaw-state-backup.
- Create, inspect, and restore versioned snapshots of OpenClaw state
- Supports two backup modes: `mutable` (runtime state only) and `full` (adds identity/bootstrap files)
- Includes manifest, integrity checksums, and compatibility metadata in each backup
- Robust restore workflow: archive verification, compatibility check, dry-run/reporting, and auto rollback creation
- Safe restore: never overwrites with failed/verifiable archives, avoids deleting unrelated files
- Includes clear recovery steps with generated rollback archive for easy undo
Metadata
Frequently Asked Questions
What is OpenClaw State Backup?
Create, inspect, and restore versioned OpenClaw state backups with rollback safety. Use when backing up or migrating OpenClaw memory, workspace state, gatewa... It is an AI Agent Skill for Claude Code / OpenClaw, with 310 downloads so far.
How do I install OpenClaw State Backup?
Run "/install openclaw-state-backup" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw State Backup free?
Yes, OpenClaw State Backup is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does OpenClaw State Backup support?
OpenClaw State Backup is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw State Backup?
It is built and maintained by Danielwangyy (@danielwangyy); the current version is v1.0.2.
More Skills