Cloud Backup [S3 R2 B2 ..]

• Risk level: Low
• Analyzed: Feb 17, 2026, 2:59 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill is internally consistent with its stated purpose (backing up OpenClaw data to S3-compatible storage); it includes a reasonable shell script and docs, but there are a few implementation/metadata omissions and operational behaviours you should review before installing.

This skill appears to do what it says: archive OpenClaw data and upload to S3-compatible storage using the aws CLI. Before installing or enabling it: 1) Verify you trust your agent to store secrets in OpenClaw config (the SKILL.md says the agent will run gateway config.patch). 2) Provide least-privilege credentials (bucket-scoped, minimal actions) or use an AWS_PROFILE/short-lived tokens. 3) Note the registry metadata omits aws CLI and credential env vars — ensure aws CLI v2 and gpg (if you want encryption) are installed. 4) Review the included scripts yourself (they are bundled) and test backup+restore with --dry-run on a non-production dataset. 5) Consider enabling ENCRYPT=true and protecting GPG passphrases, and set config file permissions (chmod 600) per the docs. If you want more assurance, ask the author to update registry metadata to list aws as a required binary and declare the env vars/primary credential expected.