Backup Tool

Backup and restore files with compression and encryption. Use when user needs to backup important files, create scheduled backups, sync folders, encrypt sens...

Security Scan

The skill's description claims encryption, incremental backups, and integrity verification, but the included code does not implement encryption or incremental logic and contains a risky tar extraction, so the package is internally inconsistent and potentially unsafe.

Purpose & Capability

Name/description say AES-256 encryption, incremental backups, exclude patterns, and integrity verification, but the Python script only creates compressed tar archives and prints a SHA256 snippet. There is no encryption implementation, no incremental backup logic, and exclude patterns passed to the script are not applied. This mismatch between claimed capabilities and actual code is a substantive inconsistency.

Instruction Scope

SKILL.md instructs running the included script and scheduling via cron (which matches the script), but it documents options (--encrypt, --incremental, --exclude behavior, AES-256) that are not implemented by the script. The runtime instructions therefore mislead users about what will happen.

Install Mechanism

No install spec and no external dependencies; this is instruction-only with an included Python script. No downloads or package installs are requested.

Credentials

The skill requests no environment variables, no credentials, and no config paths. That is proportional to its stated local-file backup purpose.

Persistence & Privilege

always is false and the skill does not request elevated persistence or modify other skills or system-wide agent settings.

What to consider before installing

Do not assume this tool encrypts or performs incremental backups — the README claims AES-256 encryption and incremental features but the script lacks those implementations. The restore function uses tarfile.extractall(...) directly, which is vulnerable to path traversal (malicious or poorly formed archive members can write outside the destination). Exclude patterns are accepted as arguments but never applied, and integrity verification is only a printed SHA256 prefix (no verification on restore). If you plan to use this: (1) review and test it on harmless data first; (2) do not run restores as root and avoid restoring untrusted archives; (3) implement or use a safe extraction routine that prevents path traversal; (4) add real encryption (use standard tools/libraries like GPG or the python cryptography library) and proper verification on restore; (5) either fix the missing incremental/exclude logic or use a well-audited backup tool (rsync, borg, restic) for production. The inconsistencies are suspicious but not evidence of intentional malice — treat this as untrusted example code until it's audited and corrected.

Backup and restore files with compression and encryption.

Quick Start

# Backup a folder
python scripts/backup.py /path/to/folder --output backup.tar.gz

# Restore
python scripts/backup.py --restore backup.tar.gz --destination /restored

Usage

python scripts/backup.py SOURCE [OPTIONS]

Options:
  --output PATH       Output backup file
  --compress FORMAT   Compression: gzip, bzip2, xz (default: gzip)
  --encrypt           Encrypt backup with password
  --restore PATH      Restore from backup
  --destination DIR   Restore destination
  --incremental      Create incremental backup
  --exclude PATTERN  Exclude pattern (can repeat)

Examples

# Simple backup
python scripts/backup.py ~/Documents --output docs-backup.tar.gz

# Encrypted backup
python scripts/backup.py ~/Important --output secure-backup.tar.gz --encrypt

# Incremental backup
python scripts/backup.py /data --output incremental --incremental

# Restore encrypted backup
python scripts/backup.py --restore secure-backup.tar.gz --destination /restored

Scheduling Backups

Add to crontab for automatic backups:

0 2 * * * python /path/to/backup.py /home --output /backup/daily.tar.gz

Features

• Compression: gzip, bzip2, xz
• AES-256 encryption
• Incremental backups
• Exclude patterns
• Integrity verification