← 返回 Skills 市场

self-backup-to-feishu

Name: self-backup-to-feishu
Author: bruce-zhaobo

作者 Bruce-ZhaoBo · GitHub ↗ · v1.0.1 · MIT-0

cross-platform ⚠ suspicious

279

总下载

当前安装

版本数

在 OpenClaw 中安装

/install self-backup2feishu

功能描述

AI助手状态自动备份到飞书文档。当用户需要：(1) 备份AI状态到云端，(2) 从飞书恢复AI记忆，(3) 设置自动备份机制，(4) 跨设备同步AI助手状态时使用此技能。触发词：「备份状态」「恢复状态」「从飞书恢复」「同步记忆」。

安全使用建议

This skill appears to do what it says (backup and restore assistant state to Feishu) but has important mismatches and sensitive behavior you should consider before installing: - The package did not declare required credentials, yet the docs/scripts expect Feishu app_id/app_secret, document tokens, and a tenant_access_token — demand that these be declared and handled securely (prefer injected secrets, not hardcoded values in files). - The scripts read sensitive local files including ~/.msmtprc (email credentials) and the system crontab, and the restore flow writes files and adds cron jobs. Only run in an environment where you trust the skill and can accept those changes. - The code uses /root/.openclaw/workspace and /root logs. Prefer running under an unprivileged user and change workspace paths to a user-owned directory before running. - The recovery flow suggests piping cron lines into crontab, which can add arbitrary scheduled jobs — review any cron content before restoring. - If you still want to use it: review and edit the scripts to (1) avoid reading secrets you don't want backed up, (2) require explicit confirmation before restoring or adding cron entries, (3) store Feishu credentials encrypted or provided at runtime, and (4) run initial tests in an isolated environment. Because of the credential declaration mismatch and the sensitive file/cron manipulation, treat this as suspicious unless the author provides clearer credential/config declarations and a minimal, audited script set.

功能分析

Type: OpenClaw Skill Name: self-backup2feishu Version: 1.0.1 The skill bundle is designed to backup and restore the AI agent's entire state to Feishu (Lark) documents, which includes reading and exfiltrating sensitive files such as `~/.msmtprc` (typically containing plain-text SMTP credentials) and system `crontab` entries. While these actions are aligned with the stated purpose of a 'self-backup' utility, the automated handling of secrets and the instructions in `references/recovery-guide.md` to modify system persistence (cron jobs) pose a significant security risk. The scripts `scripts/daily-backup.py` and `scripts/manual-backup.py` facilitate the collection of this sensitive data for cloud storage, which could lead to credential exposure.

能力评估

ℹ Purpose & Capability

The skill's name/description (backup to Feishu) matches the scripts and recovery guide: they read assistant state files, generate a backup document, and describe restoring from a Feishu doc. However the SKILL.md and code reference Feishu credentials (app_id, app_secret, doc tokens, tenant_access_token) but the registry entry declares no required environment variables or credentials — this is an inconsistency that should have been declared.

⚠ Instruction Scope

The runtime instructions and scripts read and reconstruct sensitive local data: MEMORY.md, IDENTITY.md, USER.md, SOUL.md, ~/.msmtprc (email credentials), and the system crontab. They also include steps to write files back to disk and add cron jobs. Reading and restoring .msmtprc and crontab are high-sensitivity actions and go beyond simple document-syncing; the SKILL.md gives broad discretion (e.g., '掌握新技能时' triggers) which could lead to frequent accesses.

✓ Install Mechanism

There is no external install or downloader; this is instruction-only plus bundled scripts. No network download/install mechanism was used, so risk from remote arbitrary code fetch is low. Scripts will be present in the skill package and may be executed by the agent.

⚠ Credentials

Registry metadata lists no required env vars but the documentation and code require Feishu app_id/app_secret/doc tokens/tenant_access_token and expect the app to have document access. The scripts operate on /root/.openclaw/workspace and logs under /root, and read ~/.msmtprc — these are privileged paths. The lack of declared credentials and the use of root paths is disproportionate and inconsistent.

ℹ Persistence & Privilege

The skill is not always-on (always: false) and uses normal autonomous invocation settings. It writes files to its own workspace (local backups and a .pending-feishu-backup marker) but does include instructions to modify system cron. Modifying cron and writing ~/.msmtprc are privileged operations — the skill should explicitly request/declare that level of access before use.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install self-backup2feishu
安装完成后，直接呼叫该 Skill 的名称或使用 /self-backup2feishu 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Self-backup to Feishu - Automatic AI Assistant State Backup to Feishu An automatic backup and recovery mechanism for AI assistant states, supporting Feishu document storage. Give your AI assistant "cloud memory" - restore all memories and configurations with one click after reinstalling or switching devices. Core Features: - Automatic Backup: Daily scheduled backups, event-triggered backups (when learning new skills, completing tasks) - Manual Backup: Request backup anytime with incremental updates to Feishu documents - One-Click Recovery: Read backup from Feishu and rebuild all state files - Cross-Device Sync: Quickly restore complete memory after reinstallation Backup Contents: - Identity information (IDENTITY.md) - User preferences (USER.md) - Behavioral guidelines (SOUL.md) - Long-term memory (MEMORY.md) - Email configuration (.msmtprc) - Cron job list Design Principles: - Incremental Updates: Read existing content before updating, preserve history - Dual Backup: State backup + chat history backup for complete memory - Local Cache: Save locally first, sync to Feishu during sessions Use Cases: - AI assistant needs cloud backup for memory - Quick recovery after system reinstall - Sync AI state across multiple devices - Share AI configuration with team Trigger Phrases: - "backup state" - "restore state" - "restore from Feishu" - "sync memory" Requirements: - Feishu Open Platform application (app_id, app_secret) - Feishu document for storing backup Version: 1.0.0 Author: @Bruce-ZhaoBo Tags: backup, feishu, ai-assistant, cloud-sync

v1.0.0

- 首发版本：实现 AI 助手重要状态一键或自动备份到飞书文档，并支持从飞书恢复全部核心配置。 - 支持每日定时和手动触发备份，增量更新文档内容，保留历史信息。 - 自动同步和恢复身份信息、用户信息、灵魂定义、长期记忆、邮箱配置和定时任务。 - 支持多设备跨平台同步 AI 助手状态，便捷保障数据安全。 - 提供详细配置说明和脚本用法，提升易用性。

元数据

Slug self-backup2feishu

版本 1.0.1

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 2

常见问题

self-backup-to-feishu 是什么？

AI助手状态自动备份到飞书文档。当用户需要：(1) 备份AI状态到云端，(2) 从飞书恢复AI记忆，(3) 设置自动备份机制，(4) 跨设备同步AI助手状态时使用此技能。触发词：「备份状态」「恢复状态」「从飞书恢复」「同步记忆」。它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 279 次。

如何安装 self-backup-to-feishu？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install self-backup2feishu」即可一键安装，无需额外配置。

self-backup-to-feishu 是免费的吗？

是的，self-backup-to-feishu 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

self-backup-to-feishu 支持哪些平台？

self-backup-to-feishu 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 self-backup-to-feishu？

由 Bruce-ZhaoBo（@bruce-zhaobo）开发并维护，当前版本 v1.0.1。