技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v2.0.2
统计：⭐ 5 · 2.7k · 18 current installs · 18 all-time installs
⭐ 5
安装量（当前） 18
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：arakichanxd/claw-sync
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's code matches its stated sync/backup purpose, but the registry metadata fails to declare the required credentials and there are a few operational risks (token handling, wide scope of files copied, duplicate files) that you should understand before installing.
目的
The skill is a Git-backed backup/sync tool and the included scripts clearly require BACKUP_REPO and BACKUP_TOKEN stored at ~/.openclaw/.backup.env. However, the registry metadata lists no required environment variables or primary credential — a clear mismatch. Other than that omission, the requested capabilities (reading workspace files and pushing/pulling to a git repo) are consistent with the described purpose.
说明范围
Runtime instructions and scripts stay within the stated purpose (push/pull/list/status/setup). They read/write files under ~/.openclaw/workspace and copy entire skills/* directories into the backup. That is expected, but copying skills/* can unintentionally include sensitive files if other skills store secrets in files. The SKILL.md and code explicitly exclude openclaw.json and .env, which reduces some risk.
安装机制
No install spec — this is an instruction + code-only skill. All code is present in the package (no remote installs or URL downloads), which lowers supply-chain risk. There are duplicated files and nested copies (top-level vs claw-sync/), which is odd but not directly dangerous.
证书
The scripts need a high-privilege GitHub/GitLab token (read/write to the repo) and a repository URL — those are proportionate to performing backups. The concern is that the registry did not declare these required env vars. The code embeds the token into HTTPS git URLs for exec'd git commands (repo.replace('https://', `https://${token}@`)), which can expose the token in process arguments, temporary git configs, or if temporary staging/restore d…
持久
The skill does not request always:true and does not modify other skills or system-wide agent settings. Setup writes its own cron config to ~/.openclaw/cron/backup.json and suggests how to activate it; it does not force a system cron entry automatically. This level of persistence is expected for an auto-backup helper.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Claw Sync」。简介：Secure sync for OpenClaw memory and workspace. Use /sync to push, /restore to p…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/arakichanxd/claw-sync/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。