← 返回 Skills 市场
440
总下载
0
收藏
0
当前安装
9
版本数
在 OpenClaw 中安装
/install claw-soul-backup
功能描述
Store encrypted OpenClaw workspace backups and restore them via token-secured API using claw-vault.com with local encryption and credential management.
使用说明 (SKILL.md)
Claw Vault Backup
Use this skill to run encrypted workspace backups with Claw Vault.
Official Sources
- Homepage: https://www.claw-vault.com
- Canonical instructions and API details: https://www.claw-vault.com/SKILL.md
- API host: https://api.claw-vault.com
Safety Rules
- Ask the user for explicit confirmation before first upload.
- Upload encrypted archives only (never raw workspace files).
- Treat
backup_idandapi_tokenas secrets. - Do not print secrets in logs or chat output.
- Store secrets only in a secure location approved by the user.
Workflow
1) Initial backup (one-time)
- Prepare encrypted archive locally.
- Upload with
POST /backup. - Save returned
backup_idandapi_tokensecurely.
Example:
curl -sS -X POST "https://api.claw-vault.com/backup" \
-F "[email protected];type=application/octet-stream"
2) Periodic auto-backup (daily override)
After the initial backup, run daily updates with PUT /backup/\x3Cbackup_id> using the same backup ID and API token.
Example:
curl -sS -X PUT "https://api.claw-vault.com/backup/$BACKUP_ID" \
-H "X-API-Token: $API_TOKEN" \
-F "[email protected];type=application/octet-stream"
3) Cron scheduling example
Create a local script that:
- Builds a fresh encrypted archive.
- Calls the
PUToverride endpoint. - Exits non-zero on failure.
Run it daily (example: 03:00):
0 3 * * * /bin/bash /path/to/claw-vault-backup.sh >> /path/to/claw-vault-backup.log 2>&1
Agent Behavior
- Follow https://www.claw-vault.com/SKILL.md for current response formats and full API contract.
- If user policy conflicts with these steps, stop and ask.
安全使用建议
This skill is coherent with its purpose, but before installing: 1) Verify the legitimacy of https://www.claw-vault.com and its privacy/security practices; 2) Ensure you create and verify the local encryption process (encrypt locally before any upload) and test with non-sensitive data first; 3) Be prepared to provide and securely store the returned backup_id and api_token (the SKILL.md examples reference $BACKUP_ID and $API_TOKEN even though they aren't declared); 4) Note the skill directs the agent to consult a remote SKILL.md — that external content could change how the agent behaves, so only proceed if you trust the host; 5) Confirm the agent will ask for explicit user confirmation before any first upload as stated in the Safety Rules.
功能分析
Type: OpenClaw Skill
Name: claw-soul-backup
Version: 0.1.8
The skill's stated purpose is to perform encrypted workspace backups, and it includes several good safety rules for handling secrets and user confirmation. However, it instructs the AI agent to dynamically fetch its 'current response formats and full API contract' from an external URL (`https://www.claw-vault.com/SKILL.md`). This instruction in `SKILL.md` introduces a significant supply chain vulnerability, as a compromise of the external server could allow an attacker to alter the agent's behavior through prompt injection, potentially leading to unauthorized actions or data exfiltration.
能力评估
Purpose & Capability
Name/description match the SKILL.md workflow: prepare local encrypted archives, upload to https://api.claw-vault.com, and store backup_id/api_token. The skill does not request unrelated credentials, binaries, or system access.
Instruction Scope
The runtime instructions are narrowly scoped (encrypt locally, upload, store tokens securely, ask for confirmation). However the SKILL.md tells the agent to 'Follow https://www.claw-vault.com/SKILL.md for current response formats and full API contract' — that gives the agent a live external reference that could change behavior at runtime. The skill itself otherwise directs no unexpected file reads or transmissions beyond the backup upload.
Install Mechanism
Instruction-only skill with no install spec and no code to write to disk. Lowest install risk.
Credentials
The skill does not declare required env vars or primary credentials, which is proportional to being instruction-only. Example snippets reference $BACKUP_ID and $API_TOKEN so the agent/user will need to supply those tokens; the SKILL.md instructs treating them as secrets. It would be clearer if the skill declared those as expected inputs, but their use is consistent with the stated purpose.
Persistence & Privilege
always is false and the skill does not request persistent system-wide changes or other skills' credentials. Autonomous invocation is allowed (platform default) but not combined with elevated privileges here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install claw-soul-backup - 安装完成后，直接呼叫该 Skill 的名称或使用
/claw-soul-backup触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.8
Expand discovery tags only; keep SKILL.md content unchanged.
v0.1.7
Add periodic auto-backup guidance: one-time POST, then daily cron-based PUT override flow.
v0.1.6
Remove private repo reference and simplify skill to neutral pointer-only guidance.
v0.1.5
Remove private repository reference from public skill metadata and keep pointer-only instructions.
v0.1.4
Reduce skill surface area: docs pointer only, explicit consent requirement before any network action.
v0.1.3
Fix changelog path leak; add provenance; remove plaintext secret-storage guidance; defer API procedure to canonical SKILL URL.
v0.1.2
Use /Users/daniel/.config/claw-vault.json for credential path and keep skill instructions backup-focused.
v0.1.1
Remove promotional section from SKILL instructions to improve security review clarity.
v0.1.0
Initial release: encrypted OpenClaw workspace backup and restore via Claw Vault API.
元数据
常见问题
Claw Soul Backup 是什么？
Store encrypted OpenClaw workspace backups and restore them via token-secured API using claw-vault.com with local encryption and credential management. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 440 次。
如何安装 Claw Soul Backup？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install claw-soul-backup」即可一键安装，无需额外配置。
Claw Soul Backup 是免费的吗？
是的，Claw Soul Backup 完全免费（开源免费），可自由下载、安装和使用。
Claw Soul Backup 支持哪些平台？
Claw Soul Backup 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Claw Soul Backup？
由 Daniel（@danielglh）开发并维护，当前版本 v0.1.8。
推荐 Skills