ClawHub
Back to skill

Security audit

openclaw-backup-restore

Security checks across malware telemetry and agentic risk

Overview

The skill is a legitimate OpenClaw backup tool, but restore handling is too broad for sensitive full-environment archives.

Install only if you need full OpenClaw backup and restore. Treat every backup archive as highly sensitive, prefer GPG encryption before moving it through cloud or removable media, and restore only archives you created or trust because the restore script does not tightly confine archive contents to the OpenClaw directory.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Intent-Code Divergence

Medium
Confidence
88% confidence
Finding
The skill claims restore preserves an existing ~/.openclaw with a timestamp before replacement, but the documented restore flow only warns and then replaces it, optionally with --force. This mismatch can cause operators to trust a safety guarantee that may not actually exist, leading to accidental destruction or replacement of credentials, bots, memory, and other state during restore.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The README explicitly promotes backing up and restoring credentials, secrets, memory, and workspace data as a portable archive, but it does not prominently warn that the archive is highly sensitive and may enable full account or environment compromise if accessed by others. In a backup/restore skill, this omission increases the likelihood that users will create plaintext archives and handle them as ordinary files, exposing tokens, identities, and private data.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The migration instructions suggest copying the archive via USB, cloud, or SCP without warning that the backup may contain plaintext credentials and other sensitive data. This is dangerous because users may upload or move unencrypted archives through third-party systems or removable media, creating a straightforward path to secret disclosure and downstream account compromise.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.