← 返回 Skills 市场
314
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install oc-guard
功能描述
Safe OpenClaw config planning/apply workflow with bilingual execution receipts.
安全使用建议
This skill appears to do what it claims: validate and apply OpenClaw config changes while producing signed receipts. Before installing or running it, verify you trust the included scripts (scripts/oc-guard.py) because it will: 1) execute the system openclaw and opencode CLIs, 2) write backups and logs under your OpenClaw home and /tmp, and 3) create a local receipt secret file (OCGUARD_RECEIPT_SECRET_FILE) to sign receipts. Make sure the openclaw/opencode binaries it will invoke are the intended ones on PATH (or set OCGUARD_OPENCLAW_BIN/OCGUARD_OPENCODE_BIN), review the script source if you are not trusting the publisher, and ensure backups and the receipt secret are stored where you expect before using apply operations (especially --confirm).
功能分析
Type: OpenClaw Skill
Name: oc-guard
Version: 1.0.2
The oc-guard skill is a configuration management utility for OpenClaw that implements a 'plan and apply' workflow for safe edits to openclaw.json. The core logic in scripts/oc-guard.py includes extensive safety features such as automatic backups, configuration validation (both custom and via the official openclaw binary), path allowlisting, and post-apply canary checks with automatic rollback on failure. While the tool requires broad permissions to manage system configurations and restart services, its behavior is transparent, well-documented, and includes robust mechanisms to prevent accidental misconfiguration or secret leakage.
能力评估
Purpose & Capability
Name/description (OpenClaw config guard) align with the actual behavior: the CLI calls openclaw/opencode, validates proposals, creates plan/apply flows, backups, receipts and canary checks. Required binaries (python3, openclaw, opencode) are appropriate.
Instruction Scope
SKILL.md instructs agents to invoke the bundled script and enforce receipts/gates. The runtime script implements receipt generation, masking logic, path allowlists, backups, and uses /tmp for diagnostics. Instructions and implementation do not attempt to read unrelated system secrets, but they do write/ read local files (backup dir, receipt secret file, /tmp debug/log files) as part of normal operation — this is expected but worth noting.
Install Mechanism
This is an instruction-only skill with an included Python CLI script; there is no automated install that downloads external code. No obscure URLs or archive extraction are used.
Credentials
The skill does not require external credentials. It optionally consumes environment overrides (OPENCLAW_HOME, OCGUARD_* vars) and creates/stores a local receipt secret file under the OpenClaw home directory. These environment variables and local secret storage are proportional to generating signed receipts and configuring backup paths, but you should be aware the skill persists a secret file and writes backups/logs locally.
Persistence & Privilege
always:false (no forced global inclusion). The script writes to user/home paths and /tmp (logs, backups, a receipt-secret file, diagnostics). This is reasonable for a config-guard tool, but installing it will give the skill the ability to create/read those files in the user's OpenClaw home directory.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install oc-guard - 安装完成后，直接呼叫该 Skill 的名称或使用
/oc-guard触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
Deprecated slug. Please use oc-guard-skill (latest maintained releases).
v1.0.1
Docs update: bilingual README and top announcement section
v1.0.0
Initial release
元数据
常见问题
OC Guard 是什么？
Safe OpenClaw config planning/apply workflow with bilingual execution receipts. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 314 次。
如何安装 OC Guard？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install oc-guard」即可一键安装，无需额外配置。
OC Guard 是免费的吗？
是的，OC Guard 完全免费（开源免费），可自由下载、安装和使用。
OC Guard 支持哪些平台？
OC Guard 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OC Guard？
由 edmond（@edmond-ai）开发并维护，当前版本 v1.0.2。
推荐 Skills