OpenClaw Backup Safe

Backup and restore OpenClaw data. Use when user asks to create backups, set up automatic backup schedules, restore from backup, or manage backup rotation. Ha...

This package appears to do what it says: create and rotate local archives of ~/.openclaw. Before installing or scheduling it: (1) remember backups include API keys, agent auth, Telegram sessions and other secrets — protect the backup directory (restrict filesystem permissions) and consider encrypting archives or storing them in an encrypted location; (2) inspect the script (you already have it) to confirm it only touches the expected paths; (3) verify what the OpenClaw agent's "report result to user" will transmit (avoid sending archive contents or secrets to external endpoints); (4) test restore procedures in a safe environment before trusting production data; (5) note the package has no homepage and the registry metadata owner differs from the embedded _meta.json ownerId — this lowers provenance confidence, so prefer a well-known source or mirror if available.

Type: OpenClaw Skill Name: openclaw-backup-safe Version: 1.0.1 The OpenClaw Backup skill provides functionality to archive and restore the `~/.openclaw` directory, including sensitive data like credentials and agent configurations. The `scripts/backup.sh` script correctly uses `tar` to create archives, excludes temporary files, and implements a 7-day rotation policy. The `SKILL.md` and `references/restore.md` files provide clear instructions for backup, restore, and scheduling via OpenClaw's cron system. All operations, including file system access and handling of sensitive data, are directly aligned with the stated purpose of a backup utility and show no evidence of malicious intent, data exfiltration, or unauthorized actions. The prompt injection surface in `SKILL.md` is used legitimately to instruct the agent to run the backup script.