Clawdbot Backup

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only backup skill, but it handles and can overwrite sensitive ClawdBot configuration, so backups and restores should be treated carefully.

Use this skill if you intentionally want to back up or restore ClawdBot state. Keep backup archives private, consider encryption, avoid public git remotes for backups that may include contexts or settings, and restore only archives you trust after previewing their contents.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Restoring an incorrect or untrusted backup could replace your skills, commands, MCP settings, or other ClawdBot behavior.

Why it was flagged

The documented restore command can replace existing files under the user's home directory, including ClawdBot skills and settings. This is disclosed and purpose-aligned, but it is a high-impact operation if the wrong archive is restored.

Skill content
# Restore (will overwrite existing) ... tar -xzvf "$BACKUP_FILE" -C "$HOME"
Recommendation

Preview archive contents, restore only backups you trust, keep a separate current backup before restoring, and manually review changed skills/settings afterward.

What this means

Backup archives or git repositories may contain private conversation context, local settings, or integration configuration.

Why it was flagged

The backup scope includes persistent contexts, MCP configuration, and machine-specific settings. These are expected for a backup tool, but they may contain private data, tool configuration, or instructions that will later be restored and reused.

Skill content
✓ ~/.claude/mcp/ # MCP configurations ... ✓ ~/.claude/contexts/ # Saved contexts ... .claude/settings.local.json
Recommendation

Store backups in a private location, consider encryption, avoid pushing sensitive backups to public repositories, and exclude machine-specific or secret-bearing files when they are not needed.

NoteHigh Confidence
ASI08: Cascading Failures
What this means

A problematic skill, setting, or MCP configuration could be copied across devices if included in a synced backup.

Why it was flagged

The skill is designed to propagate ClawdBot configuration across machines. This is core to the stated purpose, but a bad configuration or unsafe skill in a backup could be spread to other environments.

Skill content
- Sync between multiple machines
- Version control your configuration
- Migrate to new devices
Recommendation

Review backups before syncing or restoring them on new machines, and test restored configurations in a low-risk environment when possible.