Security audit
绿联NAS OpenClaw备份
Security checks for vulnerabilities and agentic risk
Overview
This is a disclosed local backup and restore skill for OpenClaw on Ugreen NAS, with expected care needed because restores overwrite OpenClaw state.
Install only if you intend to back up or restore this OpenClaw deployment. Treat backup archives as sensitive because they include configuration, data, workspace content, and skills; store them privately, restore only trusted archives, confirm the target path, and make a fresh backup before overwriting current state.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.