ClawHub
Back to skill

Security audit

MyOpenClaw Backup Restore

Security checks across malware telemetry and agentic risk

Overview

This appears to be a real OpenClaw backup tool, but it needs review because it handles credentials, sessions, and executable restored state through a network-accessible management server.

Install only if you need full OpenClaw migration or disaster recovery. Treat backup archives like password vaults, avoid exposing the HTTP server outside a trusted local network or tunnel, prefer environment-based tokens over URL/argv tokens, and restore only archives you created or fully trust.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Intent-Code Divergence

Medium
Confidence
97% confidence
Finding
The UI explicitly tells remote users they are in 'read-only mode' and that create/restore are disabled, but the upload interface remains available and functional for non-local clients. In a backup/restore tool, upload changes server state by transferring archives to the host, so this is a misleading security boundary that can enable unauthorized remote data placement, storage abuse, or staging of archives for later restore.

Session Persistence

Medium
Category
Rogue Agent
Content
---
name: myopenclaw-backup-restore
description: "Cross-platform backup and restore for OpenClaw. Works on Windows, macOS, and Linux — backups created on any OS can be restored on any other OS. Use when user wants to create a snapshot, restore from backup, migrate to a new machine, or protect against data loss. Supports dry-run preview, automatic pre-restore snapshots, gateway token preservation, credential permission hardening, and a built-in HTTP server for browser-based management. Only requires Node.js (no bash/rsync/python needed)."
metadata:
  openclaw:
    requires:
Confidence
88% confidence
Finding
create a snapshot, restore from backup, migrate to a new machine, or protect against data loss. Supports dry-run preview, automatic pre-restore snapshots, gateway token preservation, credential permis

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec, suspicious.secret_argv_exposure

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
scripts/backup-restore.js:119

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
scripts/server.js:198

Instructions pass high-value credentials through process argv.

Critical
Code
suspicious.secret_argv_exposure
Location
SKILL.md:82