openclaw-backup

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard tools like rclone, sqlite3, and rsync for its primary purpose. All command executions are well-guarded with proper quoting and argument handling, including specific fixes for potential injection via single-quote characters in filenames.
  • [DATA_EXFILTRATION]: The skill performs network operations using rclone to transfer the OpenClaw state directory to a user-specified Tigris bucket. This is the core functionality and is executed through documented, user-configured endpoints. The instructions explicitly warn the user not to print credentials from rclone.conf or the state directory.
  • [SAFE]: The backup script excludes sensitive SQLite journals and temporary files that belong to live databases to ensure consistency and prevent the inclusion of transient data.
  • [SAFE]: The restore script operates in a dry-run mode by default, requires explicit --yes confirmation, and creates a safety copy of the existing state before performing an atomic swap, ensuring no data loss occurs during an interrupted transfer.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 05:53 PM
Security Audit — agent-trust-hub — openclaw-backup