← Back to Skills Marketplace
2233admin

Config Rollback

by 2233admin · GitHub ↗ · v1.1.0 · MIT-0
cross-platform ✓ Security Clean
474
Downloads
0
Stars
2
Active Installs
2
Versions
Install in OpenClaw
/install config-rollback
Description
Auto-rollback protection for config changes. Backs up before edit, sets a 5-minute system timer to restore if things go wrong. Works with any service config,...
README (SKILL.md)

Config Rollback — 改配置再也不怕炸

Story

凌晨两点,你改了一行 nginx 配置,reload,网站挂了。SSH 连不上——因为你也改了 sshd_config。

你盯着黑屏,后悔没备份。

这个 skill 就是你的后悔药。

改配置前,它先备份,然后设一个 5 分钟的系统级定时炸弹。如果 5 分钟内你没说"没问题"——它自动把配置还原,重启服务。就算你把 SSH 搞断了,定时任务照样跑,因为它用的是 at 命令,不依赖你的连接。

How It Works

You: "自动回滚"

Agent:
1. cp config → config.bak
2. echo "restore" | at now + 5 minutes  (system-level, survives disconnect)
3. Returns job ID

You: [make changes, test]

Happy? → atrm \x3Cjob-id>     (cancel the bomb)
Broken? → wait 5 min       (auto-restores)

Usage

Say "auto rollback" or "自动回滚" before editing any config:

# Backup + set 5-min restore timer
cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak
echo "cp /etc/nginx/nginx.conf.bak /etc/nginx/nginx.conf && systemctl reload nginx" | at now + 5 minutes

# Make your changes...
vim /etc/nginx/nginx.conf
systemctl reload nginx

# If everything works, cancel the timer:
atrm \x3Cjob-id>

When to use

  • Editing nginx, sshd, firewall, or any service config
  • Changing API gateway routing rules
  • Updating DNS or proxy settings
  • Any change that could lock you out of a remote server

Key Principle

The restore timer is a system-level scheduled task (at / crontab). It does NOT depend on your shell session, SSH connection, or any application. Even if you brick the service, the timer still fires.

Usage Guidance
This skill appears to do what it says: back up a config file and schedule a 5-minute restore with `at`. Before installing or invoking it, consider: - The SKILL.md runs shell commands that change /etc files and schedule system jobs — these usually require root. Ensure you understand and run the commands as the correct user. - `at`/`atrm` and `systemctl` must exist on the host; the skill does not check for them. - Verify any backup/restore commands and paths before running or allowing an agent to run them — the scheduled job will run unattended and can execute arbitrary shell commands. If you don't fully trust the skill source, run the example commands manually yourself and inspect the scheduled job (atq) rather than giving the agent authority to create them. - Consider safer alternatives: use version-controlled configuration directories, atomic config reloads, or infrastructure-specific rollback mechanisms where available. If you want higher assurance, ask the publisher for provenance (homepage, source repo) or require the skill to include checks (presence of `at`, privilege warnings, and safer atomic backup semantics) before use.
Capability Analysis
Type: OpenClaw Skill Name: config-rollback Version: 1.1.0 The skill provides a legitimate utility for system administrators to safely edit configuration files by creating backups and scheduling an automatic restoration task using the 'at' command. The logic is transparently documented in SKILL.md and uses standard system tools (cp, at, systemctl) for their intended purposes without any evidence of malicious intent, data exfiltration, or unauthorized access.
Capability Assessment
Purpose & Capability
The name/description (auto-rollback for config edits) matches the SKILL.md instructions: backing up files and scheduling a 5-minute system restore using `at`. There are no unrelated environment variables, binaries, or installs requested.
Instruction Scope
The SKILL.md explicitly instructs running cp on system config paths (e.g., /etc/nginx/nginx.conf), echoing restore commands into `at`, and cancelling with `atrm`. This stays within the stated purpose, but it assumes root privileges and presence of system tools (`at`, `systemctl`) without checks. The instructions also demonstrate concrete shell commands that — if copied verbatim for other targets — could overwrite important files; users or an agent must substitute paths carefully.
Install Mechanism
Instruction-only skill with no install spec and no code to write to disk. Lowest install risk.
Credentials
No environment variables or credentials are required (consistent). However, the actions manipulate system config files and create system-level scheduled jobs, which effectively require elevated privileges to be useful; the skill does not document privilege requirements or safeguards.
Persistence & Privilege
The skill does not request permanent inclusion (always:false). It does instruct creation of persistent, system-level scheduled jobs (`at`) that will run independently of the user session — this is expected for the stated purpose but increases the impact of any mistaken or malicious scheduled command.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install config-rollback
  3. After installation, invoke the skill by name or use /config-rollback
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
Rewrite with origin story, bilingual, generic (not OpenClaw-only)
v1.0.0
Initial release of config-rollback skill—provides automated rollback protection for system configuration changes. - Backs up the current configuration before any changes. - Sets a system-level scheduled task to restore the backup and restart the service after 5 minutes. - Rolls back automatically if changes break the system. - Users can cancel the rollback if everything works as expected. - Designed for any critical configuration changes, ensuring double protection.
Metadata
Slug config-rollback
Version 1.1.0
License MIT-0
All-time Installs 2
Active Installs 2
Total Versions 2
Frequently Asked Questions

What is Config Rollback?

Auto-rollback protection for config changes. Backs up before edit, sets a 5-minute system timer to restore if things go wrong. Works with any service config,... It is an AI Agent Skill for Claude Code / OpenClaw, with 474 downloads so far.

How do I install Config Rollback?

Run "/install config-rollback" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Config Rollback free?

Yes, Config Rollback is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Config Rollback support?

Config Rollback is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Config Rollback?

It is built and maintained by 2233admin (@2233admin); the current version is v1.1.0.

💬 Comments