safe-backup_skill

This skill automates safe backup of OpenClaw state and workspace with exclusions and secure storage guidance.

Python

2.6k

GitHub Stars

2

Bundled Files

2 months ago

Catalog Refreshed

3 months ago

First Indexed

Readme & install

Copy the install command, review bundled files from the catalogue, and read any extended description pulled from the listing source.

Installation

Preview and clipboard use veilstrat where the catalogue uses aiagentskills.

npx veilstrat add skill openclaw/skills --skill safe-backup

_meta.json630 B
SKILL.md9.7 KB

Overview

This skill creates a secure backup of the OpenClaw state directory and workspace, packaging files while excluding known sensitive items. It provides a reproducible backup, optional encryption, and clear restore steps so you can export, save, or move agent state safely. The tool is focused on protecting credentials and reducing accidental exposure when storing or sharing backups.

How this skill works

When triggered, the skill collects the OpenClaw state and workspace directories, applies exclusion rules for sensitive files (logs, keys, auth profiles, environment files), and produces a compressed tarball. It does not upload or push backups automatically; instead it outputs a local archive path and offers recommended storage workflows (encrypted local archive, private Git, or rsync to remote). Restore instructions include stopping the gateway, extracting files, and re-authenticating excluded credentials.

When to use it

Before upgrading or migrating OpenClaw installations
When exporting agent workspaces for archival or transfer
Before making major configuration changes or testing risky skills
To create periodic backups for disaster recovery
Prior to handing over an environment to another operator

Best practices

Exclude credentials and API tokens from backups and re-authenticate after restore
Encrypt archives before storing in cloud or remote repositories
Verify backup integrity with tar -tzf before deleting originals
Test restores periodically in an isolated environment
Keep offsite copies and document required post-restore steps (re-authentication)

Example use cases

Quickly snapshot a working OpenClaw instance before a software upgrade
Move an agent workspace from a laptop to a server while excluding secrets
Maintain weekly encrypted backups of OpenClaw state for disaster recovery
Archive agent definitions and skills for long-term storage without exposing API keys
Share non-sensitive configuration with a teammate by extracting only allowed directories

FAQ

No. Known sensitive files such as auth-profiles.json, .env, *.pem, *.key, credentials.json, and api-keys.json are excluded by default. You must re-authenticate after restore.

Will this skill push backups to remote services automatically?

No. The skill creates a local compressed archive and suggests storage options. Uploads or pushes must be performed manually or via your own scripts to ensure security.

How do I encrypt backups?

Use a strong symmetric cipher such as openssl enc -aes-256-cbc to encrypt the tarball, then delete the unencrypted file. The skill documentation includes an example command.