v0.1.0

fullbackup

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:29 AM.

Analysis

This skill appears to run a local backup as advertised, but users should notice that it creates retained local archives and delegates the real backup work to an existing script outside the skill package.

GuidanceInstall only if you want an agent-invocable full local OpenClaw backup. Check the existing /root/.openclaw/workspace/scripts/backup-local.sh script and protect or rotate the archives under /root/.openclaw/backups.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

scripts/full-backup.sh

BACKUP_SCRIPT="/root/.openclaw/workspace/scripts/backup-local.sh" ... "$BACKUP_SCRIPT"

The included script is only a wrapper; the actual backup behavior depends on an existing local script outside the provided skill files.

User impactIf the existing backup-local.sh script is changed or unsafe, this skill will run that behavior when invoked.

RecommendationBefore relying on the skill, verify the local backup-local.sh script, its permissions, and where it writes archives.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning

SeverityMediumConfidenceMediumStatusNote

SKILL.md

Create a full local backup of the OpenClaw workspace and configuration ... store the archive in `/root/.openclaw/backups` ... Do not delete older archives.

The skill creates persistent local copies of workspace and configuration data, and instructs that older archives should remain.

User impactBackups may contain sensitive workspace or configuration information and may persist longer than expected.

RecommendationStore backups in a protected location, review retention needs, and delete or encrypt old archives if they may contain sensitive data.