Update Plus

Full backup, update, and restore for OpenClaw - config, workspace, and skills with auto-rollback

This package appears to do what it says, but it will read and archive user config and workspace files and can upload backups to configured cloud remotes and install a cron job. Before installing or running: 1) Inspect and edit ~/.openclaw/update-plus.json to restrict backup_paths to only the directories you want backed up; 2) keep remote storage disabled until you have configured and verified your rclone remote and understand where backups will be sent; 3) enable GPG encryption if backups include sensitive files and configure GPG_RECIPIENT; 4) run update-plus with --dry-run first to preview actions; 5) be aware it performs git pull on your skills directories (so remote repo changes can be applied automatically) and can create a cron entry — only enable automated updates if you trust your skills' remote origins. If you need higher assurance, review the GitHub repo history/owner (hopyky) before cloning and consider running the scripts in a controlled environment first.

Type: OpenClaw Skill Name: update-plus Version: 4.0.3 The skill 'update-plus' provides comprehensive backup, update, and restore functionalities, utilizing powerful system commands like `rsync`, `tar`, `gpg`, `rclone`, `git`, package managers (`npm`, `pnpm`, `yarn`, `bun`), and `crontab`. While these capabilities are plausibly needed for its stated purpose (e.g., file system access for backups, network access for updates/cloud sync, cron for scheduled tasks), they represent high-risk operations. Specifically, the installation of a cron job (`bin/lib/cron.sh`) creates a persistence mechanism, and the use of `eval` with `rsync_args` (`bin/lib/backup.sh`) introduces a minor risk, even if driven by user configuration. There is no clear evidence of intentional malicious behavior or prompt injection against the agent, but the broad permissions and high-risk capabilities without explicit malicious intent warrant a 'suspicious' classification.