openclaw-reliable-backup

提供 OpenClaw 自动化每日备份、变更前快照、邮件发送、备份管理及恢复指导，确保数据高可靠性和安全。

This skill appears to implement a full backup/restore workflow and will read and archive highly sensitive OpenClaw files (credentials, identity, agents). Before installing or running it: (1) ensure BACKUP_ROOT is explicitly set and has restrictive permissions (chmod 700), (2) prefer encrypting backups (use a passphrase) before storing or emailing them — do not email raw credential-containing archives, (3) review any mail-skill you install manually (clawhub-installed skills could request your email password), (4) test the backup/restore flow in a safe environment first, and (5) ask the skill author to fix metadata inconsistencies (declare BACKUP_ROOT as a required env var) and to add explicit, automated encryption guidance so sensitive data is not accidentally exfiltrated. If you are uncomfortable with backups that include credential files, request a version that omits or redacts those paths or that enforces client-side encryption.

Type: OpenClaw Skill Name: openclaw-reliable-backup Version: 1.0.0 The skill is designed to archive and potentially exfiltrate highly sensitive data, specifically targeting the `~/.openclaw/credentials/` directory which contains API keys and authentication tokens. It utilizes `command_execution` to create ZIP archives and includes instructions in `SKILL.md` for the agent to dynamically install other skills using `clawhub install`. While these capabilities are aligned with the stated purpose of a comprehensive backup utility, the broad access to secrets and the facilitation of data transmission via email represent a significant attack surface if the agent is influenced by malicious prompts.