File Backup

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a straightforward local backup-before-editing skill; the main thing to watch is that backup copies of important files may remain until you approve deletion.

This skill appears safe and purpose-aligned. Before installing, decide where backups should be stored, especially for sensitive configuration files, and only approve backup deletion after you have verified the edited file.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may create backup files and later delete those backup files after explicit user confirmation.

Why it was flagged

The skill instructs the agent to use local file copy and delete operations as part of its backup workflow.

Skill content
cp 原文件 备份目录/原文件.日期.bak ... rm backups/xxx.bak
Recommendation

Use the skill only in directories where creating a backups folder is acceptable, and review the backup path before approving deletion.

What this means

Sensitive configuration or user-designated sensitive files could have extra local backup copies that persist longer than expected.

Why it was flagged

The skill may duplicate sensitive files into backups and intentionally keep those copies until the user confirms removal.

Skill content
用户指定的敏感文件 ... 如果用户没确认,备份一直保留
Recommendation

Choose a safe backup directory, avoid placing backups in publicly shared folders, and delete backups after verifying the edited files.