ClawHub

Agent State Backup

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed local backup-and-restore guide for OpenClaw state, with some sensitive-file and cleanup risks that fit its stated purpose.

Before installing or using this skill, review the referenced local backup, restore, and cron scripts on your machine. Treat backup archives as sensitive because they may contain identity, memory, user, and knowledge-base data. Restore only from backups you trust, and use caution with the retention command because it deletes older backup archives.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Chaining Abuse

High
Category
Tool Misuse
Content
```bash
# 修改保留天数 (默认 7 天)
ls -t agent_backup_*.tgz | tail -n +8 | xargs -r rm
# 改为保留 30 天：tail -n +31

# 修改备份目录
Confidence
87% confidence
Finding
| xargs -r rm

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal