Proton Drive Backup

Automated backup to Proton Drive with age-based truncation — sync configs, memory files, content drafts, and media with configurable retention periods. Use w...

Security Scan

The skill's files and runtime instructions are consistent with a local Proton Drive backup tool, but there are a few minor mismatches and privacy-related caveats you should understand before installing.

Purpose & Capability

The name/description say 'backup to Proton Drive via the local sync folder' and the script copies workspace files into a ProtonDrive folder. The operations (rsync/cp, retention via find) are appropriate for that purpose. Note: the script hard-codes a macOS Proton Drive path ($HOME/Library/CloudStorage/ProtonDrive-...) so it will not work as-is on non-macOS systems, and it references specific Docker volume names (langfuse, qdrant, etc.) which are environment-specific but not inherently malicious.

Instruction Scope

SKILL.md and the script instruct the agent to read and copy many local files (~/Library/LaunchAgents/*.plist, $HOME/.openclaw/openclaw.json, $HOME/.openclaw/workspace/* including MEMORY.md, agent files, media). That is consistent with a full workspace backup, but these files may contain sensitive credentials or tokens. The script will attempt to run docker when invoked with --docker, but docker is not declared as a required binary in the metadata. Also, because the script uses 'set -euo pipefail' and does an unconditional cp of openclaw.json (no || true), the script will fail if openclaw.json is missing.

Install Mechanism

This is instruction-only with no install spec and one included script. No downloads or archive extraction are performed by the skill, which minimizes install-time risk.

Credentials

The skill declares no required environment variables or credentials (primaryEnv: null), but it reads and copies local configuration files that frequently contain secrets (openclaw.json, LaunchAgents plists, MEMORY.md, agent role/outbox files). While this is coherent for a backup tool, it means sensitive data from your agent/workspace will be placed in your Proton Drive sync folder — ensure you trust the local Proton Drive app and that the destination is acceptable for those secrets.

Persistence & Privilege

The skill is not 'always: true' and does not request elevated platform privileges. It only creates directories and writes into the Proton Drive sync folder under the user's home directory; it does not modify other skills or system-wide agent settings.

Assessment

This skill appears to do what it says: copy parts of your OpenClaw workspace into your local Proton Drive sync folder and prune older artifacts. Before installing, check these things: (1) Confirm you run macOS (the Proton Drive path is macOS-specific) or update the PROTON path if not. (2) Inspect $HOME/.openclaw/openclaw.json and any LaunchAgents plists to ensure they don't contain secrets you don't want sent to Proton Drive; the script will copy them. (3) If you plan to back up Docker volumes, ensure docker is installed and only run the script with --docker when you intend to; the metadata doesn't declare docker as required. (4) Consider testing the script in a safe environment (or with a temporary Proton Drive folder) to verify behavior, and consider encrypting particularly sensitive files before backup. (5) Be aware the truncation steps permanently delete older files per the retention rules — review those retention periods to ensure they match your needs.

Privacy-first cloud backup via Proton Drive's local sync folder. Copies workspace files with age-based truncation to keep storage manageable.

Retention Policy

Content Type	Retention	Rationale
Configs (plists, JSON)	Forever	Small, critical
Memory files	60 days	Daily notes age out
Content drafts	Forever	Intellectual property
Images	90 days	Large, reproducible
Audio	30 days	Very large, reproducible
Video	60 days	Largest files
Docker backups	Keep 3	Rotated

Usage

bash scripts/backup_to_proton.sh

Safe to run multiple times — uses rsync for incremental sync.

Files

• scripts/backup_to_proton.sh — Backup script with configurable paths and retention