Security audit
Security checks across malware telemetry and agentic risk
This is a real backup/sync skill, but it handles sensitive OpenClaw data and credentials with risky restore, force-push, and optional recurring-sync behavior.
Install only if you are comfortable uploading OpenClaw memory, profile/rules files, daily logs, and custom skills to a private Git repository. Use an empty dedicated private repo, a fine-grained token limited to that repo, restrictive permissions on ~/.openclaw/.backup.env, and review /sync --dry-run before syncing. Avoid /restore --force unless you have separately backed up your skills, and enable the 12-hour auto-sync only if recurring uploads are intentional.
| `/restore` | Restore latest version | | `/restore latest` | Same as above | | `/restore backup-20260202-1430` | Restore specific version | | `/restore --force` | Skip confirmation | | `/sync-list` | List all available versions | | `/sync-status` | Show config and local backups |
// Load env
function loadEnv() {
const envFile = path.join(OPENCLAW_DIR, '.backup.env');
if (fs.existsSync(envFile)) {
const content = fs.readFileSync(envFile, 'utf8');
content.split('\n').forEach(line => {safeExec(`git commit -m "${commitMsg}"`, { stdio: 'ignore' });
// Push to main
safeExec(`git push ${repoUrl} HEAD:main --force`, { stdio: 'pipe' });
// Create version tag
safeExec(`git tag ${tagName}`, { stdio: 'ignore' });safeExec(`git commit -m "${commitMsg}"`, { stdio: 'ignore' });
// Push to main
safeExec(`git push ${repoUrl} HEAD:main --force`, { stdio: 'pipe' });
// Create version tag
safeExec(`git tag ${tagName}`, { stdio: 'ignore' });64/64 vendors flagged this skill as clean.
Detected: suspicious.dangerous_exec