← Back to Skills Marketplace
justaboyhai-wq

Safe Config Modifier

by justaboyhai-wq · GitHub ↗ · v1.0.0
cross-platform ✓ Security Clean
329
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install safe-config
Description
安全修改 OpenClaw 配置文件。用于任何需要修改 ~/.openclaw/openclaw.json 的场景,包括:模型切换、channel 配置、tools 配置、skill 安装等。确保修改前备份、预览(脱敏 key)、并获得用户确认。
Usage Guidance
This skill appears coherent for safely editing ~/.openclaw/openclaw.json. Before installing or running it: (1) inspect the bundled scripts locally (they are small); (2) always run the sanitize/preview scripts rather than the raw 'cat' commands in SKILL.md to avoid exposing secrets; (3) keep automatic/autonomous agent execution in mind — ensure the agent only runs this skill when you intend it to; (4) verify the sanitize patterns cover the secrets you actually use (they are simple sed rules and may miss some keys or have minor regex bugs); (5) the curl example will make an outbound request if executed — only run it when you want to test connectivity. If you need higher assurance, run the scripts manually in a safe environment first and ensure backups are taken (the skill also recommends doing so).
Capability Analysis
Type: OpenClaw Skill Name: safe-config Version: 1.0.0 The 'safe-config' skill is a utility designed to manage OpenClaw configuration files with a strong emphasis on safety and data privacy. It includes scripts (preview.sh, sanitize.sh, validate.sh) that use sed and jq to mask sensitive fields like apiKeys and tokens before displaying them to the user. A notable security feature is the requirement for a specific confirmation phrase ('ojbk可以改了') to prevent the AI agent from performing modifications based on vague or accidental user input. The code performs standard file operations (cp, mv, jq) and lacks any indicators of data exfiltration, persistence, or malicious execution.
Capability Assessment
Purpose & Capability
Name/description match the actual behavior: the scripts and SKILL.md operate on ~/.openclaw/openclaw.json (preview, sanitize, validate, backup, write, restart). No unrelated binaries, env vars, or remote installs are required. The one network call example (curl to api.siliconflow.cn with a test bearer token) is explainable as an optional provider connectivity check and aligns with the model-provider examples in the docs.
Instruction Scope
Most instructions stay inside the declared scope (read/preview/validate/backup/write the OpenClaw config). Two points to note: (1) the doc includes raw commands (e.g., cat ~/.openclaw/openclaw.json | jq '.') that show the full config unmasked if run — the provided preview/sanitize scripts should be used instead to avoid exposing secrets; (2) there is an example network connectivity check (curl to a specific external API) which is optional but will perform an outbound request if followed. The requirement for the exact confirmation phrase reduces accidental execution.
Install Mechanism
Instruction-only skill with bundled shell scripts; no install spec, no downloads, no package installation. Scripts are small, readable shell scripts with jq/sed usage — low install risk.
Credentials
The skill declares no required environment variables or credentials. The scripts read the local config file (which legitimately contains service keys) and emit a sanitized preview; they do not attempt to read unrelated system secrets or external credential stores. Users should note that running unsanitized commands (present in the doc) would expose secrets locally if executed.
Persistence & Privilege
always:false (not force-installed). disable-model-invocation is default false (agent-autonomous invocation is normal). The skill can modify the local config if invoked, which is its purpose; there is no evidence it attempts to modify other skills' configs or system-wide agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install safe-config
  3. After installation, invoke the skill by name or use /safe-config
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
初始版本发布
Metadata
Slug safe-config
Version 1.0.0
License
All-time Installs 2
Active Installs 2
Total Versions 1
Frequently Asked Questions

What is Safe Config Modifier?

安全修改 OpenClaw 配置文件。用于任何需要修改 ~/.openclaw/openclaw.json 的场景,包括:模型切换、channel 配置、tools 配置、skill 安装等。确保修改前备份、预览(脱敏 key)、并获得用户确认。 It is an AI Agent Skill for Claude Code / OpenClaw, with 329 downloads so far.

How do I install Safe Config Modifier?

Run "/install safe-config" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Safe Config Modifier free?

Yes, Safe Config Modifier is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Safe Config Modifier support?

Safe Config Modifier is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Safe Config Modifier?

It is built and maintained by justaboyhai-wq (@justaboyhai-wq); the current version is v1.0.0.

💬 Comments