← 返回 Skills 市场
Config Guard
作者
segasonicye
· GitHub ↗
· v0.1.0
881
总下载
0
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install config-guard
功能描述
Provides on-demand 10-second automatic rollback protection when modifying openclaw.json to ensure Gateway stability.
使用说明 (SKILL.md)
Claw Seatbelt 🛡️ (OpenClaw 安全带)
这是一款为你修改 openclaw.json 准备的“安全带”。它不像普通插件那样全天候运行,而是只在你需要修改配置并备份时,提供 10 秒的自动回滚保护。
特色功能
- 按需保护:仅在运行备份脚本时触发,不浪费系统资源。
- 10秒无敌险:修改配置后若 Gateway 无法在 10 秒内恢复,自动回退到最新备份并重启。
- 极简设计:无需复杂配置,即装即用。
Usage
The skill primarily runs as a background watchdog.
Manual Check
./bin/watchdog.sh
How it works
- Probes the local Gateway status.
- If down, captures the current "broken" config for debugging.
- Locates the most recent timestamped backup in
~/.openclaw/backups/. - Restores and restarts the Gateway service.
安全使用建议
This skill is small and coherent, but inspect and run it carefully: 1) Ensure you trust the openclaw CLI on your PATH — the script calls it with status and restart commands. 2) Check ownership/permissions of ~/.openclaw and ~/.openclaw/backups: if those dirs are writable or symlinked by an untrusted user, cp/ls operations could be abused (symlink/TOCTOU). 3) Logs are written to /tmp/openclaw-watchdog.log which is world-writeable by default on some systems; consider changing the log path or securing /tmp to avoid information disclosure or symlink attacks. 4) Backups and failed-config copies may contain sensitive credentials — secure backup storage and access. 5) Run the script manually in a safe environment first to confirm behavior; you may want to add stricter checks (atomic file replacement, secure temporary files, explicit permission checks) before using it in production.
功能分析
Type: OpenClaw Skill
Name: config-guard
Version: 0.1.0
The skill bundle provides a 'Claw Seatbelt' feature designed to automatically roll back OpenClaw Gateway configurations to a previous backup if the Gateway becomes unresponsive. The `SKILL.md` instructions are clear and directly align with this stated purpose, showing no signs of prompt injection attempts to subvert the agent. The `bin/watchdog.sh` script implements the rollback logic using standard shell commands (`ls`, `cp`, `grep`) and the legitimate `openclaw` CLI tool to manage configurations and restart the Gateway. There is no evidence of data exfiltration, unauthorized network activity, persistence mechanisms, or obfuscation. The script operates within the expected scope of a configuration management utility, making its intent benign.
能力评估
Purpose & Capability
The name/description promise (on-demand 10s rollback protection for openclaw.json/Gateway) matches the included runtime instructions and bin/watchdog.sh: it probes gateway status, finds the latest ~/.openclaw/backups/openclaw-*.json, copies it into place, and restarts the gateway via the openclaw CLI.
Instruction Scope
SKILL.md only instructs running ./bin/watchdog.sh and the script's behavior stays within that scope. However the script reads/writes $HOME/.openclaw/openclaw.json and ~/.openclaw/backups/, copies files, and writes logs to /tmp/openclaw-watchdog.log — these operations touch potentially sensitive configuration and produce files that may contain secrets. The script also assumes the presence and integrity of the openclaw CLI.
Install Mechanism
No install spec or external downloads; this is an instruction-only skill with a small bundled shell script. Nothing is fetched from remote hosts and no archives are extracted.
Credentials
The skill declares no credentials or special env vars, which is consistent. It does use $HOME and standard filesystem paths (~/.openclaw and /tmp). Because it copies configs and creates backups/logs, users should recognize it will handle files that may contain sensitive tokens; that access is proportionate to the stated purpose but still sensitive.
Persistence & Privilege
always is false and the skill is user-invocable only. It does not request permanent agent presence or modify other skills/config; it runs only when the user invokes the script.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install config-guard - 安装完成后,直接呼叫该 Skill 的名称或使用
/config-guard触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release of Claw Seatbelt
- On-demand safety for modifying openclaw.json, with 10-second automatic rollback protection.
- Engages only during backup script runs to conserve resources.
- Captures failed configurations for debugging if the Gateway fails to recover.
- Automatically restores the last good config and restarts the Gateway if needed.
- Zero setup required—simple and ready to use out of the box.
元数据
常见问题
Config Guard 是什么?
Provides on-demand 10-second automatic rollback protection when modifying openclaw.json to ensure Gateway stability. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 881 次。
如何安装 Config Guard?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install config-guard」即可一键安装,无需额外配置。
Config Guard 是免费的吗?
是的,Config Guard 完全免费(开源免费),可自由下载、安装和使用。
Config Guard 支持哪些平台?
Config Guard 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Config Guard?
由 segasonicye(@segasonicye)开发并维护,当前版本 v0.1.0。
推荐 Skills