← Back to Skills Marketplace
abdhilabs

Config Guardian

by abdhilabs · GitHub ↗ · v1.0.1
cross-platform ✓ Security Clean
7156
Downloads
4
Stars
44
Active Installs
2
Versions
Install in OpenClaw
/install config-guardian
Description
Safe OpenClaw config updates with automatic backup, validation, and rollback. For agent use - prevents invalid config updates.
Usage Guidance
Install this only if you want an agent-assisted workflow for OpenClaw config changes. Review the exact config path and value before approving a run, keep backups until the change is confirmed, and periodically remove old backups if your OpenClaw config may contain sensitive values.
Capability Analysis
Type: OpenClaw Skill Name: config-guardian Version: 1.0.1 This skill bundle is designed to provide safe and atomic configuration updates for OpenClaw, including automatic backups, validation, and rollback mechanisms. The `SKILL.md` explicitly includes guardrails for the agent, such as 'Never restart or apply config without explicit user approval' and 'Always use `atomic_apply.sh`', which are intended to enhance security and prevent misuse. The scripts (`atomic_apply.sh`, `validate_config.sh`) implement these safety features, including checks for dangerous configuration keys and invalid model IDs. There is no evidence of malicious intent, data exfiltration, persistence mechanisms, or prompt injection attempts designed to subvert the agent's security or privacy. While scripts that modify system files always carry inherent risks if misused, the design and instructions of this skill are clearly aimed at improving system integrity and preventing configuration errors.
Capability Assessment
Purpose & Capability
The skill can change persistent OpenClaw configuration via `openclaw config set`, which is high-impact, but that capability is the stated purpose and is paired with backup, validation, and rollback behavior.
Instruction Scope
Runtime instructions are scoped to `openclaw.json` updates and explicitly require user approval before applying or restarting configuration changes.
Install Mechanism
The bundle contains shell scripts and metadata indicating dependencies on `openclaw` and `python3`; no hidden installer, network fetch, or package execution was found.
Credentials
File access is limited to the OpenClaw config and backup directory under `~/.openclaw`, which fits the configuration-management purpose.
Persistence & Privilege
The skill intentionally creates timestamped local backups of `openclaw.json`; this is disclosed and useful for rollback, but those backups may preserve sensitive configuration history.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install config-guardian
  3. After installation, invoke the skill by name or use /config-guardian
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
**Summary**: Introduces atomic, automatic config updates with built-in backup, validation, and rollback. - Added `atomic_apply.sh` for one-step safe config changes; creates backups, validates, and auto-rolls back on failure. - Removed legacy scripts: `backup_config.sh` and `diff_config.sh`. - Updated workflow and documentation to enforce atomic updates and automatic rollback. - Tightened guardrails to only allow validated, agent-initiated config changes. - Backups now stored in `~/.openclaw/config-guardian-backups/`.
v1.0.0
Initial release of config-guardian — a workflow for safe OpenClaw config management. - Validates and safeguards all updates to OpenClaw configs. - Enforces automatic backups before any changes. - Performs schema validation before and after applying changes. - Provides safe rollback if validation fails. - Requires explicit approval for config restarts. - Includes scripts for backup, validation, diff, and restore operations.
Metadata
Slug config-guardian
Version 1.0.1
License
All-time Installs 269
Active Installs 44
Total Versions 2
Frequently Asked Questions

What is Config Guardian?

Safe OpenClaw config updates with automatic backup, validation, and rollback. For agent use - prevents invalid config updates. It is an AI Agent Skill for Claude Code / OpenClaw, with 7156 downloads so far.

How do I install Config Guardian?

Run "/install config-guardian" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Config Guardian free?

Yes, Config Guardian is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Config Guardian support?

Config Guardian is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Config Guardian?

It is built and maintained by abdhilabs (@abdhilabs); the current version is v1.0.1.

💬 Comments