Soul Undead
v1.1.0Backup, restore, initialize, and sync core OpenClaw workspace markdown files with the fixed private GitHub repository `soul-undead`. Use when the user wants...
⭐ 0· 99·0 current·0 all-time
by@zhao95
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, and the included script all focus on managing the fixed set of core markdown files and the fixed private repo `soul-undead`. Required tools (gh, git, python3) are appropriate for interacting with GitHub and handling state files. No unrelated credentials or binaries are requested.
Instruction Scope
Runtime instructions and the script limit actions to the stated file list and to the GitHub repo. The script will create a timestamped local snapshot before overwriting local files and writes a small state file to the skill directory. One minor mismatch: SKILL.md documents the snapshot/state path under ~/.openclaw/workspace/skills/soul-undead/, while the script uses SKILL_DIR (the script's parent dir) for local-backups and state by default — this is probably fine if the installed skill lives in that workspace path but should be confirmed during install. Behavior that can overwrite local defaults on first restore is documented and intentional.
Install Mechanism
This is an instruction-only skill with an included shell script; there is no external install/download step or arbitrary URL fetch. Nothing is written to disk beyond what the script itself does at runtime (snapshots, state file).
Credentials
The skill requests no secrets or environment variables by default. It relies on the user's GitHub CLI authentication (gh), which is appropriate and necessary for creating/reading/writing the private GitHub repo. Optional overrides (OPENCLAW_BACKUP_REPO, OPENCLAW_WORKSPACE, OPENCLAW_BACKUP_STATE_FILE, GITHUB_OWNER) are reasonable and documented.
Persistence & Privilege
The skill does not request always:true or other elevated agent privileges. It writes only its own state file and local-backups inside its skill directory and does not modify other skills or global agent configs. Autonomous invocation is allowed by default (platform normal) but not elevated here.
Assessment
This skill appears coherent and limited to backing up and restoring the seven named markdown files to a private GitHub repo. Before installing/running: ensure your GitHub CLI (gh) is installed and authenticated with the account you expect (gh auth status); verify which GitHub owner/account will be used (the script queries gh api user if GITHUB_OWNER is unset); inspect the remote repo contents on GitHub before running a first-time restore to avoid unintended overwrite; confirm where the skill will be installed so you know where local-backups and the state file will be written (the script uses the skill directory by default); consider exporting OPENCLAW_BACKUP_REPO or OPENCLAW_WORKSPACE if you want non-default locations. If you want absolute safety, manually inspect the included restore.sh and repository contents on GitHub prior to running the skill's restore flow.Like a lobster shell, security has layers — review code before you run it.
latestvk979evs3pkdqpd4znwc3k6747983rc5n
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
