← 返回 Skills 市场
269
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install openclaw-backupgg
功能描述
一键备份 OpenClaw 工作区，支持必选/可选内容，生成 ZIP 压缩包（含 SHA256 校验）
安全使用建议
This skill appears coherent and implements what it claims: local backup and restore of the OpenClaw workspace. Before using it, note that backups are not encrypted and by default are written to ~/Desktop (change the --output path if you prefer). Backups will include whatever is in your workspace — including possible API keys, tokens, or private skill code — so store or encrypt the ZIP before sharing or uploading. Review the included scripts if you want to confirm exact file lists and behavior (they perform path safety checks on restore). If you need encrypted backups, either run the ZIP through a tool that supports encryption (7z with a passphrase) or change the workflow to store backups in a secure location.
功能分析
Type: OpenClaw Skill
Name: openclaw-backupgg
Version: 1.0.1
The skill bundle provides a legitimate utility for backing up and restoring the OpenClaw workspace. It identifies and compresses sensitive configuration and memory files (e.g., `USER.md`, `config.json`) into a ZIP archive stored locally on the user's Desktop. The implementation in `scripts/backup.py` and `scripts/restore.py` is transparent, uses standard Python libraries, and includes explicit security warnings regarding the lack of encryption and the presence of sensitive data. Additionally, the restore script includes specific checks to prevent ZipSlip path traversal attacks.
能力评估
Purpose & Capability
Name/description match the actual behavior: the scripts read ~/.openclaw/workspace, collect required/optional files, create a ZIP and SHA256, and restore from a ZIP. No unrelated capabilities (cloud, admin, or network access) are requested.
Instruction Scope
SKILL.md directs running the included Python scripts and describes expected inputs/outputs. The scripts only read/write files under the user's home (workspace and Desktop or provided output path) and do not access external endpoints or unrelated system config.
Install Mechanism
No install spec; this is instruction + bundled scripts. No downloads or external installers are invoked, so nothing will be written to disk beyond the normal operation of the included scripts when run.
Credentials
The skill requests no environment variables or credentials (OK). However, by design it packages workspace contents (including skills/, USER.md, config files, logs) which may contain sensitive data (API keys, tokens, personal data). The manifest prints truncated hashes and the ZIP is explicitly not encrypted.
Persistence & Privilege
always is false and the skill does not attempt to persist configuration beyond creating backups on disk. It does not modify other skills or global agent settings. Restore prompts the user before overwriting files.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-backupgg - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-backupgg触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
修复内容：
🔒 ZipSlip 漏洞修复 (restore.py)：
检查路径是否包含 ..
检查是否是绝对路径
验证目标路径是否在工作区内
跳过可疑文件并警告
📝 虚假宣传修复 (SKILL.md)：
删除"加密压缩包"描述
改为"ZIP 压缩包（含 SHA256 校验）"
明确说明备份未加密
添加安全警告
v1.0.0
一键备份 OpenClaw 工作区，支持必选/可选内容，生成加密压缩包
元数据
常见问题
claw-backup 是什么？
一键备份 OpenClaw 工作区，支持必选/可选内容，生成 ZIP 压缩包（含 SHA256 校验）. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 269 次。
如何安装 claw-backup？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-backupgg」即可一键安装，无需额外配置。
claw-backup 是免费的吗？
是的，claw-backup 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
claw-backup 支持哪些平台？
claw-backup 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 claw-backup？
由 hhse（@hhse）开发并维护，当前版本 v1.0.1。
推荐 Skills