by 安全扫描
OpenClaw
安全
high confidenceThe skill does what it says — a small Bash snapshot script and documentation to create local, numbered project backups — and its requirements and instructions are proportionate and coherent with its purpose.
评估建议
This skill appears coherent and limited to local backup actions. Before installing/running: (1) confirm the OUTPUT_DIR location so backups are not written somewhere unexpected; (2) ensure you have enough disk space for snapshots; (3) install rsync if you want the script's excludes to be applied — the tar fallback does not apply the exclude list (so sensitive files like .env may be copied if rsync is missing); (4) run as a normal user (not root) and review the snapshot directory after the first r...详细分析 ▾
✓ 用途与能力
The name/description match the provided SKILL.md and the included shell script: it creates numbered, local snapshots of a project. It does not request unrelated credentials or services. The script uses common system utilities (rsync, tar, du, ln, mkdir, rm); rsync is optional but reasonable for this task.
✓ 指令范围
SKILL.md instructs running the included script and how to restore. The instructions are scoped to reading project files and writing backups to a local backups directory; there are no network calls, no external endpoints, and no instructions to read unrelated system files or secrets.
✓ 安装机制
No install spec is provided (instruction-only plus a script file). Nothing is downloaded or extracted at install time. This lowers risk — the script runs only when invoked.
✓ 凭证需求
The skill requires no credentials or config paths. The script accepts PROJECT_DIR and OUTPUT_DIR via arguments or environment, which is appropriate. It will create files under the chosen backups directory (filesystem write access), which is expected for a backup tool.
✓ 持久化与权限
The skill is user-invocable, not forced-always, and does not request persistent agent privileges or modify other skills. It does create/modify files only in the specified output directory.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/4/20
- Made usage examples and documentation more generic for broader applicability (e.g., replaced user-specific paths and project names with placeholders). - Improved clarity in usage instructions and examples for both backup and restore commands. - No changes to functionality; only documentation updates.
● 无害
安装命令
点击复制官方npx clawhub@latest install dev-backup
镜像加速npx clawhub@latest install dev-backup --registry https://cn.longxiaskill.com