Skills
skills/bytedance/agentkit-samples/byted-tos-openclaw-backup/Gen Agent Trust Hub

byted-tos-openclaw-backup

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill's backup routine copies sensitive configuration files to a remote cloud bucket.
  • Evidence: scripts/backup.sh targets /root/.openclaw/config/ and specifically includes .env, .json, and .yaml files.
  • Evidence: Data is copied to a mount point identified as a TOS bucket, which is a service provided by the vendor (Bytedance).
  • [COMMAND_EXECUTION]: The skill utilizes local shell scripts to perform file system operations and system checks.
  • Evidence: scripts/backup.sh uses standard utilities like find, cp, and du to manage and verify backup contents.
  • Evidence: scripts/restore.sh performs file overwrites to restore the system state from the backup directory, which is appropriate for its stated purpose.
  • [SAFE]: All operations are consistent with the skill's primary purpose of providing backup and disaster recovery functionality. The skill is authored by 'bytedance' and interacts with 'bytedance' infrastructure (TOS), representing expected behavior within the vendor's ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 11:47 PM