Msapps Session Backup

Plugin Active

Daily backups of Claude sessions, skills, and configs to Google Drive — automatic versioning and disaster recovery

Purpose

To ensure the safety of Claude sessions, skills, and configurations through automated, versioned backups to Google Drive, enabling disaster recovery.

warning:Secret ManagementThe plugin requires Google Drive credentials, but the README and manifest do not specify how these secrets are handled or stored, raising concerns about potential insecure practices like hardcoding or unencrypted storage.
warning:Data ExfiltrationThe plugin requires access to Google Drive, which involves sending session data to a third-party service. The documentation does not clearly state how this data is protected or if it includes sensitive information, raising potential exfiltration concerns.
warning:Keychain-stored secretsThe plugin requires Google Drive credentials, but the manifest does not declare them via `userConfig` with `sensitive: true`, suggesting they might be stored insecurely in `settings.json`.

warning:LoggingThere is no mention of local audit logging for destructive actions or outbound calls within the README or manifest, which is important for reviewing backup operations.

warning:GDPRThe plugin backs up Claude sessions which may contain personal data. Without clear information on data sanitization and how this data is handled when sent to Google Drive, potential GDPR compliance issues exist.

warning:Installation instructionWhile installation via marketplace is mentioned, specific instructions on how to provide Google Drive credentials are not detailed in the README, which is crucial for this plugin's functionality.