by 安全扫描
OpenClaw
安全
high confidenceThe skill's instructions are consistent with a Backup & Recovery guidance workflow and it requests no credentials or installs, though the published metadata's top-level name ('Api') doesn't match the SKILL.md name ('backup-recovery'), which looks like a minor metadata mismatch to verify before trusting provenance.
评估建议
This skill is instruction-only and matches its stated purpose, so technical risk is low. Before installing: (1) verify the publisher/owner and resolve the metadata mismatch (top-level Name 'Api' vs SKILL.md 'backup-recovery'); (2) prefer skills with a homepage or source repo when possible; (3) because it can be invoked by the agent, confirm you trust the owner or test in a restricted environment first; (4) no secrets are requested by the skill, but never paste credentials into chat — the skill w...详细分析 ▾
ℹ 用途与能力
The SKILL.md describes a Backup Recovery/DR planning workflow and the declared requirements (no env vars, no binaries, instruction-only) match that purpose. However, the registry metadata shows the top-level Name as 'Api' while the skill slug and SKILL.md use 'backup-recovery' — a metadata/name mismatch worth confirming with the publisher.
✓ 指令范围
Runtime instructions are purely advisory: ask about RPO/RTO, propose staged workflows, request user-provided context, and produce checklists and runbooks. The instructions do not ask the agent to read files, access credentials, call external endpoints, or perform actions outside the user's control.
✓ 安装机制
No install spec and no code files — instruction-only. This is low-risk because nothing is written to disk or fetched during installation.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths. The SKILL.md asks the user for contextual information (environment, scale, deadlines) which is appropriate and not the same as requesting secrets or system access.
✓ 持久化与权限
always is false and the skill does not request persistent presence or modify agent/system configuration. It can be invoked by the model (default), which is normal for skills and acceptable here given the limited scope and lack of credentials.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/24
backup-recovery 1.0.0 – Initial release. - Introduces a structured 4-stage workflow for backup recovery planning, testing, and operation. - Includes explicit guidance for clarifying goals, designing approaches, verifying implementations, and establishing operational follow-through. - Outlines trigger conditions for when to offer the full workflow versus lighter/freeform help. - Provides checklists, actionable tips, and concrete examples in backup, RPO/RTO, and restore contexts. - Supports procedural, user-adaptive guidance and targeted context gathering.
● 无害
安装命令 点击复制
官方npx clawhub@latest install backup-recovery
镜像加速npx clawhub@latest install backup-recovery --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制