中文 EN

Scan Report

Scan New Files

This report was generated in Chinese. Some content may be in Chinese.
✓ Trusted — Risk Score 0/100
Last scan:3 hr ago Rescan
0 /100
openclaw-backup-restore
OpenClaw 工作区备份、恢复、验证和 GitHub 同步技能
备份恢复技能，功能与声明一致，无恶意行为，预扫描标记的 curl|bash 仅是文档讨论示例
Skill Nameopenclaw-backup-restore
Duration40.8s
Enginepi
ClawHub OpenClaw Backup & Restore v1.5.4 by x-rayluan
📥 245 ⭐ 1
ClawHub Verdict Suspicious dangerous_execenv_credential_accessllm_suspicious
✓
Safe to install
该技能可安全使用
ResourceDeclaredInferredStatusEvidence
Filesystem WRITE WRITE ✓ Aligned scripts/backup.mjs:85-92
Shell WRITE WRITE ✓ Aligned scripts/backup-and-push.mjs:50-60
Network NONE NONE — 仅通过 git 命令间接网络操作
Environment NONE READ ✓ Aligned scripts/backup.mjs:15-16 读取 OPENCLAW_BACKUP_DIR
1 Critical 12 findings
💀
Critical Dangerous Command 危险 Shell 命令
curl | bash
FINAL-DELIVERY-REPORT.md:168
🔗
Medium External URL 外部 URL
https://keepachangelog.com/en/1.0.0/
CHANGELOG.md:5
🔗
Medium External URL 外部 URL
https://semver.org/spec/v2.0.0.html
CHANGELOG.md:6
🔗
Medium External URL 外部 URL
https://discord.com/invite/clawd
CONTRIBUTING.md:58
🔗
Medium External URL 外部 URL
https://docs.openclaw.ai
QUICKSTART.md:155
🔗
Medium External URL 外部 URL
https://img.shields.io/badge/License-MIT-yellow.svg
README.md:5
🔗
Medium External URL 外部 URL
https://opensource.org/licenses/MIT
README.md:5
🔗
Medium External URL 外部 URL
https://img.shields.io/badge/node-%3E%3D18-brightgreen
README.md:6
🔗
Medium External URL 外部 URL
https://nodejs.org/
README.md:6
🔗
Medium External URL 外部 URL
https://clawhub.ai/skills/openclaw-workspace-backup-restore
README.md:305
🔗
Medium External URL 外部 URL
https://clawhub.com
README.md:320
🔗
Medium External URL 外部 URL
https://clawlite.ai
README.md:321

File Tree

25 files · 128.5 KB · 4648 lines
Markdown 14f · 3369L JavaScript 6f · 1162L JSON 2f · 59L Shell 3f · 58L
├─ ▾ 📁 examples
│ ├─ 🔧 automated-backup.sh Shell 16L · 507 B
│ ├─ 🔧 basic-backup.sh Shell 22L · 520 B
│ └─ 🔧 pre-deployment-hook.sh Shell 20L · 536 B
├─ ▾ 📁 scripts
│ ├─ 📜 backup-and-push.mjs JavaScript 121L · 4.0 KB
│ ├─ 📜 backup.mjs JavaScript 275L · 7.8 KB
│ ├─ 📜 list.mjs JavaScript 164L · 4.4 KB
│ ├─ 📜 restore.mjs JavaScript 264L · 7.7 KB
│ └─ 📜 validate.mjs JavaScript 210L · 5.9 KB
├─ ▾ 📁 tests
│ └─ 📜 test.mjs JavaScript 128L · 4.4 KB
├─ 📋 _meta.json JSON 5L · 109 B
├─ 📝 CHANGELOG.md Markdown 46L · 1.9 KB
├─ 📝 CONTRIBUTING.md Markdown 58L · 1.3 KB
├─ 📝 DELIVERY_REPORT.md Markdown 348L · 10.4 KB
├─ 📝 EXAMPLES.md Markdown 147L · 3.3 KB
├─ 📝 FEATURE_DEFINITION.md Markdown 321L · 10.2 KB
├─ 📝 FINAL-DELIVERY-REPORT.md Markdown 336L · 11.4 KB
├─ 📝 P0-1-DELIVERY-REPORT.md Markdown 254L · 7.0 KB
├─ 📝 P0-2-DELIVERY-REPORT.md Markdown 296L · 7.1 KB
├─ 📋 package.json JSON 54L · 1.5 KB
├─ 📝 QUICKSTART.md Markdown 155L · 3.0 KB
├─ 📝 README.md Markdown 325L · 7.8 KB
├─ 📝 RELEASE_CHECKLIST.md Markdown 355L · 8.4 KB
├─ 📝 RELEASE-CHECKLIST.md Markdown 110L · 3.2 KB
├─ 📝 RUNBOOK.md Markdown 313L · 8.0 KB
└─ 📝 SKILL.md Markdown 305L · 8.0 KB

Security Positives

✓ 零外部依赖，仅使用 Node.js 内置模块 (fs, path, crypto, os)
✓ 敏感字段 sanitization 机制 (SENSITIVE_PATTERNS 过滤 API keys/tokens)
✓ 自动 pre-restore 备份防止数据丢失
✓ SHA-256 完整性校验
✓ Dry-run 预览模式
✓ SKILL.md 完整声明所有能力