绿联NAS OpenClaw备份

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only backup skill is coherent and purpose-aligned, but its backups and restores include all OpenClaw configuration, data, workspace, and skills, so users should handle archives carefully.

Use this skill only when you intend to back up or restore this OpenClaw deployment. Choose a safe backup directory, keep archives private, verify that a backup is trusted before restoring it, and create a current backup before overwriting existing configuration.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Medium

What this means

Restoring the wrong or untrusted backup could replace the current OpenClaw configuration and skills.

Why it was flagged

The restore process uses tar extraction under /root and explicitly overwrites existing OpenClaw configuration. This is disclosed and purpose-aligned, but it is a high-impact local state change.

Skill content

用户确认后执行恢复 / Execute restore after user confirmation ... 警告：恢复会覆盖现有配置 ... cd /root
tar -xzf "$BACKUP_DIR/openclaw-backup-20260317-143022.tar.gz"

Recommendation

Restore only from trusted backup files, confirm the target path before proceeding, and make a fresh backup of the current state before overwriting it.

ASI06: Memory and Context Poisoning

Medium

What this means

Backup archives may expose private OpenClaw data if shared or stored insecurely, and restoring a tampered archive could affect future agent behavior.

Why it was flagged

The backup includes persistent OpenClaw state, workspace content, and skills, which may contain private data or behavior-shaping artifacts that persist across future use.

Skill content

- `~/.openclaw/` — 所有配置和数据 / All config and data
- `~/.openclaw/workspace/` — 工作空间和 Skills / Workspace and skills
- `~/.openclaw/openclaw.json` — 主配置文件 / Main config file

Recommendation

Store backup archives securely, limit who can modify them, and inspect or verify archives before restoring.