OpenClaw Backup Rclone

自动备份 OpenClaw 整体配置到远程存储（支持任意 rclone 后端：COS、S3、FTP、SFTP、WebDAV等）。 触发场景： - 创建/配置自动备份任务 - 设置备份周期、保留份数、目标目录 - 手动触发备份 - 查看/恢复备份 - OpenClaw 运行异常时的提醒

This skill appears to do what it claims, but it will read and upload sensitive OpenClaw files (including credentials/ memory/agents) to whatever rclone remote you specify. Before installing: (1) ensure you trust the remote storage and use encryption (rclone crypt / server-side encryption), (2) avoid putting access keys on the command line or in crontab — prefer interactive rclone config or secure storage, (3) if you don't want secrets backed up, run the script with --include-credentials=false (and test with --check-only), (4) run the backup under an account with least privilege and review resulting backups to confirm no unwanted data was included, and (5) keep rclone and openclaw CLI up to date. If you need, request the author to add explicit warnings/confirmation before including credentials and to support encrypted backups by default.

Type: OpenClaw Skill Name: openclaw-backup-rclone Version: 1.0.0 The skill is a legitimate backup utility designed to archive OpenClaw configuration, workspaces, and credentials to remote storage via rclone. The core logic in `scripts/backup.sh` creates a compressed archive and uploads it to a user-provided destination, with support for backup rotation and status checks. While the script handles sensitive information (the `credentials/` directory), this behavior is transparently documented in `SKILL.md` as part of its intended functionality, and there is no evidence of hardcoded malicious endpoints, data exfiltration to unauthorized parties, or obfuscated code.