← 返回 Skills 市场
justaboyhai-wq

Safe Config Modifier

作者 justaboyhai-wq · GitHub ↗ · v1.0.0
cross-platform ✓ 安全检测通过
329
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install safe-config
功能描述
安全修改 OpenClaw 配置文件。用于任何需要修改 ~/.openclaw/openclaw.json 的场景,包括:模型切换、channel 配置、tools 配置、skill 安装等。确保修改前备份、预览(脱敏 key)、并获得用户确认。
安全使用建议
This skill appears coherent for safely editing ~/.openclaw/openclaw.json. Before installing or running it: (1) inspect the bundled scripts locally (they are small); (2) always run the sanitize/preview scripts rather than the raw 'cat' commands in SKILL.md to avoid exposing secrets; (3) keep automatic/autonomous agent execution in mind — ensure the agent only runs this skill when you intend it to; (4) verify the sanitize patterns cover the secrets you actually use (they are simple sed rules and may miss some keys or have minor regex bugs); (5) the curl example will make an outbound request if executed — only run it when you want to test connectivity. If you need higher assurance, run the scripts manually in a safe environment first and ensure backups are taken (the skill also recommends doing so).
功能分析
Type: OpenClaw Skill Name: safe-config Version: 1.0.0 The 'safe-config' skill is a utility designed to manage OpenClaw configuration files with a strong emphasis on safety and data privacy. It includes scripts (preview.sh, sanitize.sh, validate.sh) that use sed and jq to mask sensitive fields like apiKeys and tokens before displaying them to the user. A notable security feature is the requirement for a specific confirmation phrase ('ojbk可以改了') to prevent the AI agent from performing modifications based on vague or accidental user input. The code performs standard file operations (cp, mv, jq) and lacks any indicators of data exfiltration, persistence, or malicious execution.
能力评估
Purpose & Capability
Name/description match the actual behavior: the scripts and SKILL.md operate on ~/.openclaw/openclaw.json (preview, sanitize, validate, backup, write, restart). No unrelated binaries, env vars, or remote installs are required. The one network call example (curl to api.siliconflow.cn with a test bearer token) is explainable as an optional provider connectivity check and aligns with the model-provider examples in the docs.
Instruction Scope
Most instructions stay inside the declared scope (read/preview/validate/backup/write the OpenClaw config). Two points to note: (1) the doc includes raw commands (e.g., cat ~/.openclaw/openclaw.json | jq '.') that show the full config unmasked if run — the provided preview/sanitize scripts should be used instead to avoid exposing secrets; (2) there is an example network connectivity check (curl to a specific external API) which is optional but will perform an outbound request if followed. The requirement for the exact confirmation phrase reduces accidental execution.
Install Mechanism
Instruction-only skill with bundled shell scripts; no install spec, no downloads, no package installation. Scripts are small, readable shell scripts with jq/sed usage — low install risk.
Credentials
The skill declares no required environment variables or credentials. The scripts read the local config file (which legitimately contains service keys) and emit a sanitized preview; they do not attempt to read unrelated system secrets or external credential stores. Users should note that running unsanitized commands (present in the doc) would expose secrets locally if executed.
Persistence & Privilege
always:false (not force-installed). disable-model-invocation is default false (agent-autonomous invocation is normal). The skill can modify the local config if invoked, which is its purpose; there is no evidence it attempts to modify other skills' configs or system-wide agent settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install safe-config
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /safe-config 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
初始版本发布
元数据
Slug safe-config
版本 1.0.0
许可证
累计安装 2
当前安装数 2
历史版本数 1
常见问题

Safe Config Modifier 是什么?

安全修改 OpenClaw 配置文件。用于任何需要修改 ~/.openclaw/openclaw.json 的场景,包括:模型切换、channel 配置、tools 配置、skill 安装等。确保修改前备份、预览(脱敏 key)、并获得用户确认。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 329 次。

如何安装 Safe Config Modifier?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install safe-config」即可一键安装,无需额外配置。

Safe Config Modifier 是免费的吗?

是的,Safe Config Modifier 完全免费(开源免费),可自由下载、安装和使用。

Safe Config Modifier 支持哪些平台?

Safe Config Modifier 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Safe Config Modifier?

由 justaboyhai-wq(@justaboyhai-wq)开发并维护,当前版本 v1.0.0。

💬 留言讨论