Restic Workstation Backup
v2.0.0Design, implement, and operate encrypted restic backups for Linux home directories with encryption, deduplication, automated scheduling, and restore testing....
⭐ 0· 96·0 current·0 all-time
by@kiris-z
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (restic home backups) match the files and runtime instructions. The scripts create config, secrets, systemd units, logging, retry logic and validation—things you'd expect for this purpose. Example repository hosts and email addresses are only illustrative.
Instruction Scope
SKILL.md and the scripts limit actions to backup-related tasks (writing /etc or user config, installing scripts, creating timers, running restic checks/restores). Plan-only default is enforced; destructive actions (prune with delete) are guarded by --dry-run or require explicit flags. The only broad host/system change is archiving/removal of a matching legacy crontab entry (archived before removal), which is consistent with migrating cron→systemd.
Install Mechanism
This is an instruction-only skill with bundled shell scripts — no remote downloads or package installs are performed by the skill itself. Scripts check for restic and instruct the operator to install it if missing. No URL-based installers or external archives are fetched.
Credentials
No external credentials or unrelated environment variables are requested. The scripts generate and store a local restic password file and an env file with appropriate file-permissions (0600) and advise never to print secrets. Example remote repo SSH host/key usage is expected for an SFTP transport and is not requested directly by the skill.
Persistence & Privilege
The skill does not request permanent system inclusion (always:false). System-level changes require explicit --apply and root; user-level installs are separate and do not require root. Autonomous model invocation is allowed by platform default but the skill itself defaults to plan-only and requires explicit flags to modify system state.
Assessment
This appears to be a legitimate restic backup installer. Before installing: run the plan-only mode first (no --apply) to review exactly what will be written; verify the target repository endpoint is correct and that you trust that host; ensure restic is installed on the system; back up existing root crontab and configuration before allowing the script to archive/remove legacy entries; store the generated password file in your secret vault if you want long-term safe storage; be aware that system-level apply needs sudo/root and may start a first backup immediately if you pass --run-initial-backup. If you have strict outbound mail policies, review the alerting/mail steps (default mail address is illustrative).Like a lobster shell, security has layers — review code before you run it.
latestvk97fbvayf0vrp1h12567bqmehs837p68
License
MIT-0
Free to use, modify, and redistribute. No attribution required.