openclaw-backup
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard tools like
rclone,sqlite3, andrsyncfor its primary purpose. All command executions are well-guarded with proper quoting and argument handling, including specific fixes for potential injection via single-quote characters in filenames. - [DATA_EXFILTRATION]: The skill performs network operations using
rcloneto transfer the OpenClaw state directory to a user-specified Tigris bucket. This is the core functionality and is executed through documented, user-configured endpoints. The instructions explicitly warn the user not to print credentials fromrclone.confor the state directory. - [SAFE]: The backup script excludes sensitive SQLite journals and temporary files that belong to live databases to ensure consistency and prevent the inclusion of transient data.
- [SAFE]: The restore script operates in a dry-run mode by default, requires explicit
--yesconfirmation, and creates a safety copy of the existing state before performing an atomic swap, ensuring no data loss occurs during an interrupted transfer.
Audit Metadata