Workspace Zip Backup
v0.1.0OpenClaw workspace 核心 markdown 文件快速压缩备份与还原工具，只备份 .md 文件并保持文件夹结构 | Fast backup & restore tool for OpenClaw workspace core markdown files, preserves directory...
⭐ 0· 92·0 current·0 all-time
by@roryyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the provided instructions: the SKILL.md contains shell scripts to find and zip .md files from a workspace and to restore them. There are no unrelated binaries, env vars, or config paths requested.
Instruction Scope
Instructions are limited to local filesystem operations (find/zip/unzip) and to copying the provided script blocks into executable files. They do not reference network endpoints or request secrets. Small issues: the scripts use set -euo pipefail but their argument/help checks reference $1 even when no args are provided (this can cause immediate failure due to 'set -u'); find|xargs is used without -print0/-0 handling so files with whitespace/newlines may break; if the output zip is placed inside the source directory it could be picked up by find and included in the archive (self-inclusion/recursion risk). These are correctness/usability problems, not indicators of malicious intent.
Install Mechanism
This is instruction-only (no install spec, no downloads). The README/SKILL.md tell the user to copy code blocks into scripts and place them in ~/.local/bin; no external code is fetched and nothing is written by the platform itself.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The scripts operate on local files only and default to a workspace path under the user home directory, which is consistent with the described purpose.
Persistence & Privilege
always is false and the skill does not request persistent or elevated privileges. The provided instructions advise installing scripts into the user's ~/.local/bin; nothing in the skill attempts to modify other skills or system-wide agent settings.
Assessment
This skill appears to do exactly what it says: local backup/restore of .md files. Before using: (1) review and run the scripts locally on a small test folder to confirm behavior, (2) avoid placing the output zip inside the source directory (or change the script to write the archive outside the source) to prevent the archive being re-included, (3) consider improving the scripts: fix argument checks so they don't reference $1 when no args are given (or remove set -u), use find -print0 and xargs -0 to safely handle filenames with spaces/newlines, and optionally exclude the output zip name from the find results, (4) don't run as root and save backups to an external location if they contain sensitive notes, and (5) there are no network calls or credential requests in this skill. If you want these fixes but cannot edit scripts yourself, ask the author for an updated version that addresses the points above.Like a lobster shell, security has layers — review code before you run it.
latestvk97da2b6vgfrkzsq46zt0rptas832yfv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.