OpenClaw Self Backup & Restore

Backup and restore OpenClaw agent configuration, skills, memory, and workspace files. Use when asked to "backup", "backup yourself", "create a restore point"...

This skill appears to do what it says: create and restore local backups of OpenClaw configuration, skills, memory and credential files. Before using it, consider the following: (1) Backups include sensitive data (e.g., ~/.openclaw/.env and credentials/) — store backups with strong filesystem permissions and/or encrypt them (e.g., gpg, age, encrypted archive). (2) If you enable automated cron/announce, verify what the OpenClaw cron 'announce' and channel behavior sends — avoid broadcasting secrets or full manifest to external channels. (3) Do a test restore on a disposable environment to confirm the restore flow and file ownerships/permissions. (4) Keep the backups directory (~/backups) on a secure volume; if you store backups off-host (cloud), use client-side encryption. (5) Avoid running restore as root; run as the same user to preserve expected paths. If you want stronger guarantees, ask the author for an option to encrypt backups or to exclude credential files by default.

Type: OpenClaw Skill Name: yuebao-self-backup Version: 1.0.1 The skill is designed to backup and restore the OpenClaw agent's entire state, including sensitive API keys (`.env`), credentials, and configuration files. While the scripts (`scripts/backup.py` and `scripts/restore.py`) perform these actions locally as described, `restore.py` contains a TarSlip vulnerability by using `tar.extractall(HOME)` without validating member paths, which could allow a malicious archive to overwrite arbitrary files. The handling of unencrypted credentials and the lack of path sanitization during restoration are significant security risks.