clawdbot-skill-update
Facilitates comprehensive backup, update, and restore workflows for Clawdbot with dynamic workspace detection and multi-agent support.
Install this skill
Security score
The clawdbot-skill-update skill was audited on May 24, 2026 and we found 28 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 53 | - Read workspace paths from `~/.clawdbot/clawdbot.json` |
Access to hidden dotfiles in home directory
| 72 | ~/.skills/clawdbot-update/backup-clawdbot-dryrun.sh |
Access to hidden dotfiles in home directory
| 87 | ~/.skills/clawdbot-update/backup-clawdbot-full.sh |
Access to hidden dotfiles in home directory
| 91 | - `~/.clawdbot/clawdbot.json` (config) |
Access to hidden dotfiles in home directory
| 92 | - `~/.clawdbot/sessions/` (session state) |
Access to hidden dotfiles in home directory
| 93 | - `~/.clawdbot/agents/` (multi-agent state) |
Access to hidden dotfiles in home directory
| 94 | - `~/.clawdbot/credentials/` (auth tokens) |
Access to hidden dotfiles in home directory
| 95 | - `~/.clawdbot/cron/` (scheduled jobs) |
Access to hidden dotfiles in home directory
| 96 | - `~/.clawdbot/sandboxes/` (sandbox state) |
Access to hidden dotfiles in home directory
| 100 | **Output:** `~/.clawdbot-backups/pre-update-YYYYMMDD-HHMMSS/` |
Access to hidden dotfiles in home directory
| 107 | cat ~/.skills/clawdbot-update/UPDATE_CHECKLIST.md |
Access to hidden dotfiles in home directory
| 122 | ~/.skills/clawdbot-update/restore-clawdbot.sh ~/.clawdbot-backups/pre-update-YYYYMMDD-HHMMSS |
Access to hidden dotfiles in home directory
| 152 | BACKUP_DIR=~/.clawdbot-backups/pre-update-YYYYMMDD-HHMMSS |
Access to hidden dotfiles in home directory
| 166 | jq '.whatsapp.dmPolicy = "pairing"' ~/.clawdbot/clawdbot.json | sponge ~/.clawdbot/clawdbot.json |
Access to hidden dotfiles in home directory
| 171 | jq '.agent.sandbox.scope = "agent"' ~/.clawdbot/clawdbot.json | sponge ~/.clawdbot/clawdbot.json |
Access to hidden dotfiles in home directory
| 180 | ~/.skills/clawdbot-update/check-upstream.sh |
Access to hidden dotfiles in home directory
| 183 | ~/.skills/clawdbot-update/validate-setup.sh |
Access to hidden dotfiles in home directory
| 186 | ~/.skills/clawdbot-update/backup-clawdbot-dryrun.sh |
Access to hidden dotfiles in home directory
| 189 | ~/.skills/clawdbot-update/backup-clawdbot-full.sh |
Access to hidden dotfiles in home directory
| 216 | ~/.skills/clawdbot-update/restore-clawdbot.sh <backup-dir> |
Access to hidden dotfiles in home directory
| 222 | cp <backup-dir>/clawdbot.json ~/.clawdbot/ |
Access to hidden dotfiles in home directory
| 278 | jq '.agent.sandbox' ~/.clawdbot/clawdbot.json |
Access to hidden dotfiles in home directory
| 281 | jq '.routing.agents[] | {name, sandbox}' ~/.clawdbot/clawdbot.json |
Access to hidden dotfiles in home directory
| 293 | LATEST_BACKUP=$(ls -t ~/.clawdbot-backups/ | head -1) |
Access to hidden dotfiles in home directory
| 294 | ~/.skills/clawdbot-update/restore-clawdbot.sh ~/.clawdbot-backups/$LATEST_BACKUP |
Access to hidden dotfiles in home directory
| 311 | git clone <repo-url> ~/.skills/clawdbot-update |
Access to hidden dotfiles in home directory
| 312 | chmod +x ~/.skills/clawdbot-update/*.sh |
External URL reference
| 252 | open http://localhost:3001/logs |