← 返回 Skills 市场

Billy Emergency Repair

Name: Billy Emergency Repair
Author: highlander89

作者 Highlander89 · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

762

总下载

当前安装

版本数

在 OpenClaw 中安装

/install billy-emergency-repair

功能描述

Performs Neill-authorized emergency repair on Billy system authentication by clearing tokens, restarting gateway, backing up config, and verifying success.

使用说明 (SKILL.md)

Billy Emergency Repair Skill

Use When

Neill explicitly requests Billy system repair
Neill reports Billy authentication/gateway issues
Neill says "fix Billy" or "Billy is down"
Billy system appears unresponsive to Neill

Don't Use When

Billy is working fine
Issue is not authentication-related
Anyone other than Neill requests the repair
Routine maintenance (not emergency)

AUTHORIZATION REQUIRED

⚠️ NEILL-ONLY COMMAND ⚠️ Only Neill can authorize emergency repairs to Billy. Never run without explicit Neill authorization.

Usage

Standard Repair (Recommended)

# Switch to Opus for enhanced diagnostics
export OPENCLAW_MODEL_OVERRIDE="anthropic/claude-opus-4-6"

# Run authorized repair
bash ~/.openclaw/workspace/scripts/emergency-repair/fix-billy-auth.sh --authorized-by Neill

Setup (Run Once)

# Set up SSH keys first time
bash ~/.openclaw/workspace/scripts/emergency-repair/setup-billy-repair-keys.sh

What It Does

Verifies Neill's authorization (security check)
SSH into Billy (EC2 via Tailscale)
Backs up Billy's config (safety first)
Clears stale authentication tokens (removes .token, device*.json)
Removes hardcoded tokens (prevents repeat issues)
Restarts Billy's gateway (fresh start)
Verifies repair success (tests authentication)
Logs everything (full audit trail)
Reports back to Neill (success/failure)

Typical Conversation Flow

Neill: "SAPCONET, Billy is showing authentication errors again, please fix him"

SAPCONET Response:

🚨 Emergency repair authorized by Neill
🔧 Switching to Opus model for enhanced diagnostics
🔗 Connecting to Billy via SSH...
📋 Backing up Billy's configuration...
🧹 Clearing stale authentication tokens...
⚠️  Found hardcoded token - removing...
🔄 Restarting Billy's gateway...
⏳ Waiting for startup...
🧪 Testing authentication...
✅ SUCCESS: Billy's authentication restored!
📊 Repair completed in 45 seconds

Error Handling

SSH Connection Failed

Check Billy is online
Verify Tailscale connectivity
Confirm SSH key is installed on Billy

Repair Failed

Manual intervention required
Provide Neill with full error logs
Escalate with specific diagnostic info

Uncertain Result

Gateway responds but status unclear
Recommend Neill verify manually
Provide repair log for analysis

Security Features

Neill-only authorization - Script rejects unauthorized use
SSH key authentication - Secure connection to Billy
Full audit logging - Every action is recorded
Config backups - Original settings preserved
Non-destructive - Only removes auth tokens

Prerequisites

SSH key must be installed on Billy (one-time setup)
Tailscale connectivity between SAPCONET and Billy
Billy must be online and accessible

Files Created

/home/neill/.openclaw/workspace/output/billy-repair-YYYYMMDD-HHMM.log
~/.openclaw/openclaw.json.pre-repair-YYYYMMDD-HHMM (backup on Billy)

Testing

# Test SSH connection
ssh -i ~/.ssh/billy-repair-key [email protected] 'echo "Connection works"'

# Dry run (check authorization)
bash ~/.openclaw/workspace/scripts/emergency-repair/fix-billy-auth.sh
# Should show: "UNAUTHORIZED: This repair requires Neill's explicit authorization"

Troubleshooting

If repair consistently fails:

Check Billy's system logs
Verify OpenClaw installation integrity
Consider full OpenClaw reinstall
Check for deeper system issues (disk space, permissions, etc.)

Remember: This is for authentication emergencies only. Use Opus model for complex diagnostics.

安全使用建议

This skill tells the agent to run local repair scripts and touch SSH keys and config files, but the package does not include those scripts or declare the sensitive files it will access. Before installing or enabling it: (1) inspect the exact scripts referenced (~/.openclaw/workspace/scripts/emergency-repair/*.sh) to confirm they only do what you expect; (2) verify the authorization check is enforced by the script (and not just by this README text); (3) ensure backups and dry-run options exist; (4) restrict autonomous invocation (disable-model-invocation) or require manual confirmation so repairs only run when Neill explicitly approves; and (5) confirm log and backup destinations are appropriate and do not leak secrets. If you cannot inspect or trust the referenced scripts, treat this skill as high-risk and do not enable it.

功能分析

Type: OpenClaw Skill Name: billy-emergency-repair Version: 1.0.0 The skill describes high-privilege actions including SSH access to a remote system (100.90.73.34), manipulation of authentication tokens, and service restarts, as detailed in SKILL.md. While the skill claims robust security features like 'Neill-only authorization' and 'non-destructive' operations, the actual implementation scripts (`fix-billy-auth.sh`, `setup-billy-repair-keys.sh`) are not provided, preventing verification of these claims and introducing a significant blind spot for potential vulnerabilities (e.g., shell injection, improper authorization checks). Additionally, SKILL.md instructs the OpenClaw agent to override its operational model (`export OPENCLAW_MODEL_OVERRIDE="anthropic/claude-opus-4-6"`), which is a powerful form of prompt injection, even if presented for 'enhanced diagnostics', making the skill suspicious due to its high-risk capabilities and unverified implementation details.

能力评估

✓ Purpose & Capability

Name/description match the runtime instructions: SSH to 'Billy', clear tokens, back up config, restart gateway and report. The actions described are within the stated purpose of an emergency authentication repair.

⚠ Instruction Scope

SKILL.md instructs the agent to run local scripts (e.g. ~/.openclaw/workspace/scripts/emergency-repair/fix-billy-auth.sh and setup-billy-repair-keys.sh), perform SSH via Tailscale, back up configs and delete tokens. Those are high-impact operations and the skill assumes the presence and behavior of local scripts whose contents are not included in the package — the instructions therefore grant broad operational capability without showing what will actually run.

✓ Install Mechanism

There is no install spec and no remote download. The skill is instruction-only, so nothing will be written or fetched by the registry package itself.

⚠ Credentials

Metadata declares no required env vars or config paths, yet SKILL.md references specific files and credentials: ~/.ssh keys, ~/.openclaw workspace scripts, and writing logs under /home/neill/.openclaw. The skill will need access to local SSH keys and filesystem paths (sensitive credentials) but does not declare or document them in the metadata — this mismatch is disproportionate and reduces transparency.

ℹ Persistence & Privilege

The skill is not marked always:true and has no install. However the platform default allows autonomous invocation (disable-model-invocation:false). SKILL.md demands 'Neill-only' authorization, but enforcement depends on the local scripts. Combining an agent-capable skill that can run local high-privilege scripts with no extra safeguards is risky; consider requiring explicit manual confirmation or disabling autonomous invocation unless you trust and have audited the scripts.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install billy-emergency-repair
安装完成后，直接呼叫该 Skill 的名称或使用 /billy-emergency-repair 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release of the Billy Emergency Repair skill for Neill. - Provides step-by-step, secure emergency repair workflow for Billy authentication/gateway issues. - Only Neill can authorize repairs; unauthorized attempts are rejected. - Automates backup, stale token removal, gateway restart, and full logging. - Detailed troubleshooting and error handling guidance included. - Requires SSH key setup and Tailscale connectivity.

元数据

Slug billy-emergency-repair

版本 1.0.0

许可证 —

累计安装 2

当前安装数 2

历史版本数 1

常见问题