Proxmox Backup Server Manager

Create and manage Proxmox Backup Server (PBS) backups for VMs and LXC containers. Guided first-time setup including PBS installation, NAS storage, Proxmox ho...

This skill appears to implement what it claims (managing PBS backups) and includes helper scripts, but pay particular attention to how secrets are handled during setup: - The setup flow asks you to provide API tokens, PBS passwords, and NAS/SMB credentials. Those values are conveyed through the chat unless you choose to run all commands yourself. Chatting secrets is risky — verify your platform's chat retention policy and avoid sending long-lived credentials if you cannot delete them from logs. - The skill stores credentials in plain JSON under ~/.openclaw/credentials/pbs-backup.json (the guide recommends chmod 600). That is functional but not encrypted; treat those files like sensitive secrets and store them on a trusted host or use short-lived/limited-scope tokens. - The instructions tell the agent (or you) to run system-level commands (install packages, edit /etc/fstab, create credential files on remote hosts). Prefer the 'user executes' mode unless you fully trust the agent's ability to perform remote commands and you review each command before it runs. - Minimize risk by creating a dedicated Proxmox API token with only 'backup' privileges (as documented), use limited accounts for SMB/NFS where possible, and rotate/revoke tokens after setup if you must share them through chat. - Review the included scripts (backup.py, setup.py) before running. If you want stronger protection, modify the workflow to avoid sending secrets via chat (e.g., run setup locally on a trusted machine or paste secrets directly into the local setup prompt rather than into an agent conversation). What would change this assessment: explicit encryption of on-disk credentials, avoiding any guidance that encourages pasting secrets into chat, or an implementation that performs secure, ephemeral secret exchange (e.g., out-of-band prompts only on the user's terminal).

Type: OpenClaw Skill Name: proxmox-backup-server-manager Version: 1.6.0 The skill bundle provides legitimate tools for managing Proxmox Backup Server (PBS) and Proxmox VE backups via the Proxmoxer API. Key files include `scripts/backup.py` for triggering and monitoring backups and `scripts/setup.py` for interactive configuration of hosts and storage. While the skill handles sensitive credentials (API tokens, SMB passwords) and performs high-privilege operations like mounting NAS shares and installing software, these actions are transparently documented in `SKILL.md` and `references/setup-guide.md` as core features. Security trade-offs, such as disabling SSL verification for self-signed certificates, are explicitly mentioned and justified for homelab environments, with no evidence of malicious intent or data exfiltration.