Config Guard
Prevent OpenClaw config changes from crashing the gateway. Auto-backup, schema validation, critical field checks, and auto-rollback. Use before any config.apply, config.patch, or openclaw.json edit.
Install on your platform
We auto-selected Claude Code based on this skillβs supported platforms.
Run in terminal (recommended)
claude mcp add config-guard npx -- -y @trustedskills/config-guard
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"config-guard": {
"command": "npx",
"args": [
"-y",
"@trustedskills/config-guard"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
Config Guard protects OpenClaw gateways from configuration errors made by AI agents. It performs automated backups, JSON syntax and schema validation, semantic checks for common AI mistakes (like incorrect model names or missing fields), and includes a health check with automatic rollback if the gateway fails to recover after changes. This prevents cascading failures caused by agent-introduced configuration issues.
When to use it
- Automated Configuration Updates: Use when AI agents are directly modifying
openclaw.json. - Complex Configurations: Ideal for gateways with many channels, models, or tools where errors are more likely.
- Remote Management: Essential for scenarios where remote troubleshooting of gateway crashes is difficult.
- Plugin Development: Crucial when plugins introduce new configuration options that agents might mismanage.
Key capabilities
- Automatic timestamped backups before config changes
- JSON syntax validation
- Schema validation (required fields, types, values)
- Semantic checks for AI-specific errors (e.g., incorrect model names, missing required fields)
- Critical field diff warnings (Telegram channels, authentication tokens, tool deny lists)
- Gateway health check with 30-second polling
- Automatic rollback to the previous backup if the gateway fails
Example prompts
These are not direct prompts to the skill, but rather scenarios where it protects against errors made by agents:
- "Update the model configuration to use claude-sonnet-4.5." (Config Guard will correct "claude-sonnet-4.5" to "claude-sonnet-4-5")
- "Add a new Telegram channel with ID 123." (Config Guard ensures required fields for the channel are present)
- βEnable authentication using API keys.β (Config Guard will check for placeholder values in sensitive fields.)
Tips & gotchas
The skill requires access to and modification rights of openclaw.json. Consider integrating it as a git hook (pre-config-hook.sh) to automatically validate changes before they are applied.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates β what you install today is exactly what was reviewed and verified.
Installing this skill downloads the exact code at commit 3dcfd8d7, not the current state of the repository. This prevents supply-chain attacks from unauthorized updates.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
Details
- Version
- v1.0.0
- License
- MIT
- Author
- jzOcb
- Installs
- 0
- Updated
- Feb 6, 2026
- Published
- Feb 4, 2026
π Unverified
Not yet reviewed. Use with caution.
Install command fetches the verified snapshot, not the live repository.