openclaw configure backup

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:24 PM UTC
• Version:
  1.0.0

Overview

This skill is a straightforward local backup helper for OpenClaw config files, with no evidence of hidden network access, privilege escalation, or unrelated behavior.

Use this only for the intended OpenClaw config file and choose a private backup directory, since it creates extra local copies of configuration data. If json5 is missing, install it only from a trusted package source.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 87% confidence
• Finding: The trigger phrases are broad enough to match common requests like 'backup' or 'save config,' which could cause the skill to activate unexpectedly in contexts the user did not intend. Because the skill performs file read/write operations, overly broad invocation increases the chance of unintended backups, data duplication, or writing sensitive configuration data to disk without clear consent.

VirusTotal

65/65 vendors flagged this skill as clean.