360 Secure SkillHub
360 安全技能中心

OpenClaw Recovery Drill

通过内置 Node 脚本检查 OpenClaw 工作区的备份根目录、近期备份文件、关键操作文件与恢复运行手册等信号,输出评分、PASS/WARN/FAIL 结论、发现项、建议与演练计划。该 Skill 只做就绪度检查,不执行实际恢复,也不构成恢复成功的证明。

x-rayluan
x-rayluan
热度 81.44
最近更新 2026-05-11 17:31:57
分类:安全依赖:代码执行 / 读写文件应用场景:DevOps / 工作流 / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add openclaw-recovery-drill
Metadata
name
openclaw-recovery-drill
description
This skill should be used when the user asks to test OpenClaw recovery readiness, rehearse backup/restore, run a disaster-recovery drill, validate operator recovery playbooks, check restore confidence before upgrades, or prove that backups are actually restorable instead of merely existing.

OpenClaw Recovery Drill

Use this skill to verify that an OpenClaw deployment can be recovered under pressure.

Goal

Shift the conversation from “we have backups” to “we can recover reliably within an acceptable time.”

Workflow

  1. Identify the target workspace and any known backup roots.
  2. Run the bundled drill script.
  3. Review the readiness score, gaps, and proposed drill plan.
  4. If the result is FAIL, treat it as an operator-readiness problem, not a documentation problem.
  5. If the user wants a live drill, execute the restore only in a safe test location first.

Command

node {baseDir}/scripts/recovery-drill.mjs \
  --workspace /absolute/path/to/workspace \
  --backup-root /absolute/path/to/backups

Both flags are optional. If omitted, the script checks common OpenClaw locations.

What the script checks

  • whether candidate backup roots exist
  • whether recent backup files or directories are present
  • whether the workspace contains the key operator files needed for recovery
  • whether restore/runbook signals exist
  • whether backups look recent enough for a realistic drill
  • whether the operator has clear next-step drill actions

Output format

The script returns JSON with:

  • score
  • verdict
  • summary
  • findings
  • recommendations
  • drillPlan
  • evidence

Verdicts

  • PASS — recovery posture looks usable for a lightweight drill
  • WARN — partial coverage; recoverability is uncertain
  • FAIL — backup or restore confidence is too weak to trust

Important limits

  • This is a readiness check, not proof of successful recovery by itself.
  • A real drill should restore into an isolated test path and verify startup.
  • Presence of backup files does not equal application-level recovery.

References

  • {baseDir}/references/drill-checklist.md