Security audit
OpenClaw GitHub Sync
Security checks for vulnerabilities and agentic risk
Overview
This plugin transparently syncs and backs up OpenClaw workspace data to a user-configured GitHub repository, with high-impact but disclosed behavior.
Install only if you want automatic bidirectional sync of your OpenClaw workspace with GitHub. Use a private repository and a fine-grained token limited to that repo, review include/forceInclude before enabling broader paths or jsonl session sync, enable git-crypt if sensitive files or backups should be encrypted, and treat remote restores/reset as able to overwrite local OpenClaw state.
SkillSpector was not run because this plugin release contains no bundled skills.