← Back to Skills Marketplace
OpenClaw Rescue Gateway Skill.md
by
Chaojie Chen
· GitHub ↗
· v1.0.1
368
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install openclaw-rescue-gateway-skill
Description
为 OpenClaw 配置稳定可维护的 Rescue Gateway。适用于主 Gateway 已存在、需要第二个 Discord Rescue Bot、需要独立端口和独立 launchd label、需要避免主 gateway stop 误伤 rescue gateway、需要默认 full exec 权限且不...
Usage Guidance
This skill does what it says: it shows how to run a separate OpenClaw Rescue Gateway and deliberately tells you to copy the main agent's auth profiles and to disable execution prompts and approval checks so the rescue agent runs unrestricted. That is coherent but risky: copying auth-profiles.json duplicates API keys (Anthropic, other providers) and giving the rescue gateway "full" exec and "approve-all" removes protections that would normally stop accidental or malicious code execution. Before installing/using: (1) inspect the auth-profiles.json being copied and verify you understand which provider keys will be duplicated; (2) if possible create a scoped/rescue-only Discord bot token and minimal provider credentials rather than copying production keys; (3) avoid or postpone setting tools.exec.security = "full" and plugins approve-all unless you explicitly need unattended full-exec behavior — prefer ask = "on" or more restrictive permissionMode; (4) test in an isolated account/container or with rotated tokens so compromise has limited impact; (5) keep backups and rotate credentials after testing. If you are not comfortable managing launchd/plist or handling secret files, do not apply these instructions blindly.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-rescue-gateway-skill
Version: 1.0.1
The SKILL.md instructions direct the creation of a 'Rescue Gateway' that functions as a high-privilege persistence mechanism with all security guardrails disabled. It specifically commands the agent to set 'tools.exec.security' to 'full', 'ask' to 'off', and 'permissionMode' to 'approve-all', creating an unmonitored remote execution environment. Furthermore, it instructs the duplication of sensitive API credentials (auth-profiles.json) and the setup of a persistent macOS launchd service (ai.openclaw.gateway.rescue.plist) designed to remain active even when the primary gateway is stopped.
Capability Assessment
Purpose & Capability
Name/description (Rescue Gateway) match the instructions: create a separate profile, launchd label, port, and agentDir for a rescue Discord bot. All recommended config edits, ports, and launchctl steps are directly relevant to that goal.
Instruction Scope
The SKILL.md tells the operator to copy the main agent's auth-profiles.json into the rescue agentDir and to place bot tokens and gateway tokens into the rescue config. It also instructs setting tools.exec.security = "full", tools.exec.ask = "off", and plugins.entries.acpx.config.permissionMode = "approve-all". These steps go beyond innocuous config changes: they duplicate sensitive credentials and suppress execution/audit prompts, which materially increases risk even if necessary for an unattended rescue agent.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is downloaded or written by the skill itself. Risk from install mechanism is minimal.
Credentials
The registry metadata lists no required env vars, but the instructions require setting environment variables and placing secrets (Discord bot token, rescue gateway token) into config files and copying auth-profiles.json (which may contain provider API keys). Requesting or directing duplication of those secrets is proportionate to running the rescue agent but increases credential exposure and blast radius; the skill does not declare or limit those secrets in metadata.
Persistence & Privilege
The skill itself does not request permanent platform privileges (always:false). However it explicitly recommends configuration values that grant the rescue gateway broad runtime privileges (full exec, ask: off, approve-all). That is a deliberate privilege expansion for the rescue service and should be considered a high-risk, user-controlled change.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-rescue-gateway-skill - After installation, invoke the skill by name or use
/openclaw-rescue-gateway-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
26.3.2的版本出现权限问题，解决需要主gateway里通过权限审批才能操作terminal。
把 rescue 配置收口到官方 profile 路径 ~/.openclaw-rescue/openclaw.json
把“默认 full 权限且不审核”的执行链写完整
明确写出为什么不能直接用官方默认 ai.openclaw.rescue service，而要改成独立 label ai.openclaw.gateway.rescue
你要的 changelog 和旧版缺陷也已经写进 skill 本体里了，没有额外散文件。
其中 1.0.0 的缺陷我明确列了这些核心点：
没有处理 rescue agent 的独立 auth，导致 auth-profiles.json 缺失
没有把 exec 审批链写完整，实际还会弹审核
配置路径和 workspace 路径不统一，不符合 profile 化维护
没有说明官方 profile service 在实机上可能与主 gateway stop 串扰
v1.0.0
openclaw_rescue_gateway_skill
Metadata
Frequently Asked Questions
What is OpenClaw Rescue Gateway Skill.md?
为 OpenClaw 配置稳定可维护的 Rescue Gateway。适用于主 Gateway 已存在、需要第二个 Discord Rescue Bot、需要独立端口和独立 launchd label、需要避免主 gateway stop 误伤 rescue gateway、需要默认 full exec 权限且不... It is an AI Agent Skill for Claude Code / OpenClaw, with 368 downloads so far.
How do I install OpenClaw Rescue Gateway Skill.md?
Run "/install openclaw-rescue-gateway-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw Rescue Gateway Skill.md free?
Yes, OpenClaw Rescue Gateway Skill.md is completely free (open-source). You can download, install and use it at no cost.
Which platforms does OpenClaw Rescue Gateway Skill.md support?
OpenClaw Rescue Gateway Skill.md is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw Rescue Gateway Skill.md?
It is built and maintained by Chaojie Chen (@cchaojiejes); the current version is v1.0.1.
More Skills