← 返回 Skills 市场
4368
总下载
1
收藏
39
当前安装
5
版本数
在 OpenClaw 中安装
/install cron-backup
功能描述
Set up scheduled automated backups with version tracking and cleanup. Use when users need to (1) Schedule periodic backups of directories or files, (2) Monit...
安全使用建议
Install only if you deliberately want local cron-based backup automation. Use trusted absolute paths, avoid command-string version sources, inspect the exact crontab entry after setup, and test cleanup only on a dedicated backup directory because old backup files may be permanently deleted.
功能分析
Type: OpenClaw Skill
Name: cron-backup
Version: 0.3.2
The skill bundle is classified as suspicious due to critical shell injection vulnerabilities. The `scripts/backup-versioned.sh` file uses `eval` on user-controlled input (`VERSION_SOURCE`), allowing arbitrary command execution. Furthermore, `scripts/setup-cron.sh` constructs cron job commands and entries using unsanitized user input, which are then passed to `crontab -`. This allows for arbitrary command execution and persistence via cron, especially when setting up 'versioned' backups, as it directly exposes the `eval` vulnerability. There is no evidence of intentional malicious behavior such as data exfiltration or backdoors, but these vulnerabilities pose a significant security risk.
能力评估
Purpose & Capability
The artifacts implement the advertised backup, version-aware backup, listing, cleanup, and cron scheduling functions, with no evidence of hidden network access, credential theft, exfiltration, or backdoor behavior.
Instruction Scope
The versioned backup script falls back to eval on the user-supplied version source, and cron setup composes shell commands from user inputs without safe quoting or validation, expanding the skill from backup automation into possible arbitrary command execution.
Install Mechanism
The package contains local documentation and shell scripts only; no remote installer, dependency fetch, or external code download was found.
Credentials
Reading user-selected source directories and writing archives is proportionate for backups, but scheduled backups may repeatedly copy sensitive data and cleanup permanently deletes matching .tar.gz files with limited warning and no dry-run safeguard.
Persistence & Privilege
setup-cron.sh writes directly to the user's crontab without an explicit confirmation or review step, so unsafe or mistaken command construction can persist and run repeatedly under the user's account.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install cron-backup - 安装完成后，直接呼叫该 Skill 的名称或使用
/cron-backup触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.3.2
Version 0.3.2 of cron-backup
- No code or documentation changes detected in this release.
- Functionality and documentation remain the same as the previous version.
v0.3.1
cron-backup 0.3.1
- No user-facing changes or file updates in this release.
- Documentation and core functionality remain the same as in the previous version.
v0.3.0
- Major documentation overhaul with a new SKILL.md describing all core features and usage.
- Added detailed quick start guides for one-time, scheduled, and version-aware backups.
- Explained directory backup, version checking, automatic cleanup, and scheduling with cron.
- Provided full examples, common patterns, and troubleshooting steps.
- Listed all key scripts and clarified backup naming conventions and retention policies.
v0.1.1
No changes detected in this version.
- Version bumped to 0.1.1 with no file or documentation changes.
- All features, scripts, and workflows remain the same.
v0.1.0
Initial release with automated scheduled backups, version tracking, and cleanup:
- Schedule periodic backups of directories or files using cron jobs.
- Perform backups only when a version file or command detects changes.
- Automatically clean up old backups based on time or count policies.
- Easy-to-use shell scripts for setup, backup, version-aware operations, and listing/restoring backups.
- Suitable for configuration files, code repositories, and user data protection.
元数据
常见问题
Cron Backup 是什么？
Set up scheduled automated backups with version tracking and cleanup. Use when users need to (1) Schedule periodic backups of directories or files, (2) Monit... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 4368 次。
如何安装 Cron Backup？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install cron-backup」即可一键安装，无需额外配置。
Cron Backup 是免费的吗？
是的，Cron Backup 完全免费（开源免费），可自由下载、安装和使用。
Cron Backup 支持哪些平台？
Cron Backup 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Cron Backup？
由 zfanmy（@zfanmy）开发并维护，当前版本 v0.3.2。
推荐 Skills