← 返回 Skills 市场

Openclaw Auto Backup

Name: Openclaw Auto Backup
Author: williamwg2025

作者 williamwg2025 · GitHub ↗ · v0.1.6 · MIT-0

cross-platform ✓ 安全检测通过

529

总下载

当前安装

版本数

在 OpenClaw 中安装

/install openclaw-auto-backup

功能描述

OpenClaw 自动备份技能 - 定时备份配置文件，防止数据丢失。支持版本管理、一键恢复、定时任务。包含完整 Python 脚本（backup/restore/list/cleanup）。已通过 ClawHub 多次安全审查（ZipSlip/Symlink/Manifest 修复）。关键词：opencla...

安全使用建议

This skill appears to implement a local backup/restore tool and does not phone home or request secrets. Before installing: 1) Inspect config/backup-config.json to confirm which files are watched and add exclude patterns for any files containing secrets (API keys, token files, memory dumps). 2) Be aware backups are stored unencrypted by default — encrypt them (gpg/age) or enable secure storage if you have sensitive data. 3) Test backup and restore with --debug / --dry-run in a safe environment to verify behavior. 4) Note small implementation issues (tilde paths in config may not be expanded by the scripts; manifest totalSize calculation may be incorrect and some directory restore paths may not handle directories cleanly) — these are bugs, not signs of exfiltration. 5) Confirm how the OpenClaw platform registers the claimed cron job (the scripts themselves do not auto-register system cron entries). If you require encrypted offsite backups or central credential handling, consider a dedicated backup solution instead.

功能分析

Type: OpenClaw Skill Name: openclaw-auto-backup Version: 0.1.6 The skill bundle provides a standard backup and restore utility for OpenClaw configurations. The Python scripts (backup.py, restore.py, cleanup.py, and list.py) are well-structured and include explicit security checks to prevent common vulnerabilities, such as ZipSlip path traversal and symlink attacks, during the extraction and backup processes. No network activity, obfuscation, or unauthorized data exfiltration was detected; the behavior is entirely consistent with the stated purpose of local configuration management.

能力评估

✓ Purpose & Capability

Name/description (automated backups of OpenClaw config) align with the included scripts and config. The scripts operate on ~/.openclaw, create archives, list, restore and clean backups — which is exactly what the skill claims to do.

ℹ Instruction Scope

Runtime instructions are narrowly scoped to local backup operations and do not instruct reading unrelated system files or sending data externally. Minor inconsistencies: SKILL.md claims an OpenClaw built-in cron task (with an ID) and automatic scheduling at 02:00, but the codebase contains no installer that registers system cron jobs or the platform cron entry — this likely relies on the platform, not the scripts. Also the SKILL.md/config recommend excluding sensitive files and warn that backups are not encrypted.

✓ Install Mechanism

Instruction-only install (scripts included in the skill bundle). No external downloads, package installs, or execution of fetched code — low install risk.

✓ Credentials

No environment variables, credentials, or external config paths are requested. The scripts access only user home (~/.openclaw) and their own config file. Note: the default watch list includes files that may contain sensitive data (MEMORY.md, USER.md, etc.); the skill warns backups are unencrypted and provides exclude patterns.

ℹ Persistence & Privilege

Skill does not request 'always: true' and does not modify other skills. It writes backup files to ~/.openclaw/backups and may be scheduled by the user or the OpenClaw platform; ensure you understand how scheduling is registered before enabling automatic run.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install openclaw-auto-backup
安装完成后，直接呼叫该 Skill 的名称或使用 /openclaw-auto-backup 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.6

- Added English README file: README_EN.md. - Added new configuration file: config/backup-config.json. - Introduced core Python scripts for backup management: backup.py, restore.py, list.py, and cleanup.py (located in scripts/). - Initial release of all necessary scripts and config files for automated backup, restore, listing, and cleanup functionalities.

v0.1.5

- Project renamed to "openclaw-auto-backup"; displayName updated. - Version bumped from 1.0.4 to 1.0.5. - SKILL.md and README.md extensively updated and streamlined. - Several files removed: README_EN.md, backup scripts, and config, indicating a cleanup or packaging change. - Tag and description updates; new focus on OpenClaw platform keywords, improved metadata. - User and security guidance maintained; core usage and documentation simplified and clarified.

v0.1.4

**This release focuses on improved backup security and consistency.** - backup.py now skips symbolic links during backup to prevent leaking external files. - backup.py and restore.py now use consistent relative paths for manifest handling. - Updated SKILL.md: Enhanced security section, clarified backup/restore symlink behavior, and outlined new best practices. - Passed multiple ClawHub security audits for this release.

v0.1.3

openclaw-auto-backup v0.1.3 — Security improvements and audit - Passed ClawHub security review; actively fixed key security issues. - Addressed and fixed ZipSlip path traversal vulnerability in restore.py by implementing safe extraction and path checks. - Standardized manifest file name to manifest.json for consistency. - Updated logic to skip all symbolic and hard links during restore. - Added security audit summary and best practices guidance in documentation.

v0.1.2

- Added scripts/restore.py for backup restoration functionality. - Improved documentation in SKILL.md and READMEs, including updated installation and security instructions. - Clarified backup storage paths and permission requirements. - Stated that backup files are unencrypted and provided suggestions for manual encryption. - No longer requires external repository cloning; all necessary scripts are included. - Updated config/backup-config.json and general usage instructions.

v0.1.1

openclaw-auto-backup v0.1.1 - Added detailed documentation (README.md, README_EN.md) explaining installation, configuration, usage, and security. - Introduced example configuration file (config/backup-config.json). - Added Python scripts for backup, cleanup, and listing backups (scripts/backup.py, scripts/cleanup.py, scripts/list.py). - Expanded SKILL.md with clearer configuration, usage instructions, scheduling options, and file structure. - Improved description and tags to reflect scheduled task support and enhanced documentation.

v0.1.0

Initial release — adds auto-backup capability for OpenClaw configuration files. - Supports manual and scheduled backups - Provides version management and one-click restore - Includes automatic cleanup of old backups - Backups are stored locally - Scheduled daily backups at 2 a.m.

元数据

Slug openclaw-auto-backup

版本 0.1.6

许可证 MIT-0

累计安装 4

当前安装数 4

历史版本数 7

常见问题

Openclaw Auto Backup 是什么？

OpenClaw 自动备份技能 - 定时备份配置文件，防止数据丢失。支持版本管理、一键恢复、定时任务。包含完整 Python 脚本（backup/restore/list/cleanup）。已通过 ClawHub 多次安全审查（ZipSlip/Symlink/Manifest 修复）。关键词：opencla... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 529 次。

如何安装 Openclaw Auto Backup？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-auto-backup」即可一键安装，无需额外配置。

Openclaw Auto Backup 是免费的吗？

是的，Openclaw Auto Backup 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Openclaw Auto Backup 支持哪些平台？

Openclaw Auto Backup 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Openclaw Auto Backup？

由 williamwg2025（@williamwg2025）开发并维护，当前版本 v0.1.6。