OpenClaw Rescue Gateway Skill.md

为 OpenClaw 配置稳定可维护的 Rescue Gateway。适用于主 Gateway 已存在、需要第二个 Discord Rescue Bot、需要独立端口和独立 launchd label、需要避免主 gateway stop 误伤 rescue gateway、需要默认 full exec 权限且不...

This skill does what it says: it shows how to run a separate OpenClaw Rescue Gateway and deliberately tells you to copy the main agent's auth profiles and to disable execution prompts and approval checks so the rescue agent runs unrestricted. That is coherent but risky: copying auth-profiles.json duplicates API keys (Anthropic, other providers) and giving the rescue gateway "full" exec and "approve-all" removes protections that would normally stop accidental or malicious code execution. Before installing/using: (1) inspect the auth-profiles.json being copied and verify you understand which provider keys will be duplicated; (2) if possible create a scoped/rescue-only Discord bot token and minimal provider credentials rather than copying production keys; (3) avoid or postpone setting tools.exec.security = "full" and plugins approve-all unless you explicitly need unattended full-exec behavior — prefer ask = "on" or more restrictive permissionMode; (4) test in an isolated account/container or with rotated tokens so compromise has limited impact; (5) keep backups and rotate credentials after testing. If you are not comfortable managing launchd/plist or handling secret files, do not apply these instructions blindly.

Type: OpenClaw Skill Name: openclaw-rescue-gateway-skill Version: 1.0.1 The SKILL.md instructions direct the creation of a 'Rescue Gateway' that functions as a high-privilege persistence mechanism with all security guardrails disabled. It specifically commands the agent to set 'tools.exec.security' to 'full', 'ask' to 'off', and 'permissionMode' to 'approve-all', creating an unmonitored remote execution environment. Furthermore, it instructs the duplication of sensitive API credentials (auth-profiles.json) and the setup of a persistent macOS launchd service (ai.openclaw.gateway.rescue.plist) designed to remain active even when the primary gateway is stopped.