← 返回 Skills 市场
dinghaibin

Backup Tool

作者 BIN · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
49
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install backup-tool
功能描述
Backup and restore files with compression and encryption. Use when user needs to backup important files, create scheduled backups, sync folders, encrypt sens...
使用说明 (SKILL.md)

Backup Tool

Backup and restore files with compression and encryption.

Quick Start

# Backup a folder
python scripts/backup.py /path/to/folder --output backup.tar.gz

# Restore
python scripts/backup.py --restore backup.tar.gz --destination /restored

Usage

python scripts/backup.py SOURCE [OPTIONS]

Options:
  --output PATH       Output backup file
  --compress FORMAT   Compression: gzip, bzip2, xz (default: gzip)
  --encrypt           Encrypt backup with password
  --restore PATH      Restore from backup
  --destination DIR   Restore destination
  --incremental      Create incremental backup
  --exclude PATTERN  Exclude pattern (can repeat)

Examples

# Simple backup
python scripts/backup.py ~/Documents --output docs-backup.tar.gz

# Encrypted backup
python scripts/backup.py ~/Important --output secure-backup.tar.gz --encrypt

# Incremental backup
python scripts/backup.py /data --output incremental --incremental

# Restore encrypted backup
python scripts/backup.py --restore secure-backup.tar.gz --destination /restored

Scheduling Backups

Add to crontab for automatic backups:

0 2 * * * python /path/to/backup.py /home --output /backup/daily.tar.gz

Features

  • Compression: gzip, bzip2, xz
  • AES-256 encryption
  • Incremental backups
  • Exclude patterns
  • Integrity verification
安全使用建议
Do not assume this tool encrypts or performs incremental backups — the README claims AES-256 encryption and incremental features but the script lacks those implementations. The restore function uses tarfile.extractall(...) directly, which is vulnerable to path traversal (malicious or poorly formed archive members can write outside the destination). Exclude patterns are accepted as arguments but never applied, and integrity verification is only a printed SHA256 prefix (no verification on restore). If you plan to use this: (1) review and test it on harmless data first; (2) do not run restores as root and avoid restoring untrusted archives; (3) implement or use a safe extraction routine that prevents path traversal; (4) add real encryption (use standard tools/libraries like GPG or the python cryptography library) and proper verification on restore; (5) either fix the missing incremental/exclude logic or use a well-audited backup tool (rsync, borg, restic) for production. The inconsistencies are suspicious but not evidence of intentional malice — treat this as untrusted example code until it's audited and corrected.
功能分析
Type: OpenClaw Skill Name: backup-tool Version: 1.0.0 The script 'scripts/backup.py' uses 'tarfile.extractall()', which is a known security risk vulnerable to directory traversal attacks (TarSlip) if a malicious archive is processed. Furthermore, there is a significant discrepancy between the 'SKILL.md' documentation, which claims features like AES-256 encryption and incremental backups, and the actual implementation in 'scripts/backup.py', which lacks these security and functional features.
能力评估
Purpose & Capability
Name/description say AES-256 encryption, incremental backups, exclude patterns, and integrity verification, but the Python script only creates compressed tar archives and prints a SHA256 snippet. There is no encryption implementation, no incremental backup logic, and exclude patterns passed to the script are not applied. This mismatch between claimed capabilities and actual code is a substantive inconsistency.
Instruction Scope
SKILL.md instructs running the included script and scheduling via cron (which matches the script), but it documents options (--encrypt, --incremental, --exclude behavior, AES-256) that are not implemented by the script. The runtime instructions therefore mislead users about what will happen.
Install Mechanism
No install spec and no external dependencies; this is instruction-only with an included Python script. No downloads or package installs are requested.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That is proportional to its stated local-file backup purpose.
Persistence & Privilege
always is false and the skill does not request elevated persistence or modify other skills or system-wide agent settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install backup-tool
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /backup-tool 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
Slug backup-tool
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Backup Tool 是什么?

Backup and restore files with compression and encryption. Use when user needs to backup important files, create scheduled backups, sync folders, encrypt sens... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 49 次。

如何安装 Backup Tool?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install backup-tool」即可一键安装,无需额外配置。

Backup Tool 是免费的吗?

是的,Backup Tool 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Backup Tool 支持哪些平台?

Backup Tool 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Backup Tool?

由 BIN(@dinghaibin)开发并维护,当前版本 v1.0.0。

💬 留言讨论