Install
$ agentstack add skill-gb3h-agent-skills-config-edit-guard ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Config Edit Guard
A bad config edit can brick a service. If the gateway won't start, you can't fix it — you're offline. Validate before restarting. Always.
The Iron Law
NO SERVICE RESTART WITHOUT CONFIG VALIDATION FIRST
The Protocol
1. Back up before editing
cp .bak
Do this BEFORE making any changes. Every time. No exceptions.
2. Read before editing
Read the full file first. Understand the existing structure. Identify exactly where your change goes. Do not guess at field names or invent keys — verify they exist in the schema or docs.
3. Merge, don't overwrite
Edit surgically. Change only what you need. Do not rewrite the file. Do not drop existing fields.
4. Validate before restarting
JSON:
python3 -c "import json; json.load(open('')); print('OK')"
YAML:
python3 -c "import yaml; yaml.safe_load(open('')); print('OK')"
Must print OK. If it shows an error, fix it before proceeding.
5. Restore if broken
If you can't fix the validation error:
cp .bak
Then start over. Do not attempt a restart with broken config.
6. Only then restart
openclaw gateway restart
# or whatever service depends on this config
Why This Matters
- OpenClaw gateway reads
openclaw.jsonon startup - If the JSON is invalid, the gateway crashes
- If the gateway is down, the agent is offline
- An offline agent cannot fix its own config
- The human must SSH in and repair manually
This applies to ANY service config, not just OpenClaw:
- nginx (
nginx -tbeforesystemctl reload) - systemd units (
systemd-analyze verifybefore enabling) - Docker compose (
docker compose configbeforeup) - Any daemon that reads config at startup
Red Flags — STOP
- "I'll just restart and see if it works"
- "The change is small, it can't break anything"
- "I'll fix it if it fails" (you can't — you're offline)
- Restarting without running the validation command
- Editing config from memory without reading the file first
Common Mistakes
| Mistake | Result | |---------|--------| | Trailing comma in JSON | Parse error, gateway won't start | | Missing quote on a string | Parse error, gateway won't start | | Inventing a field name | Gateway starts but ignores the field silently | | Overwriting the whole file | Lose all existing config | | Forgetting to back up | No recovery path if edit breaks things | | Using ~ in paths inside JSON | Not expanded — treated as literal ~ |
Validation Checklist
Before every service restart after a config change:
- [ ] Backup exists (
.bak) - [ ] Config validates (
OKfrom parser) - [ ] Only intended fields changed (diff against backup)
- [ ] Paths are absolute (no
~) - [ ] No trailing commas, no syntax errors
- [ ] Service restart command is ready
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: gb3h
- Source: gb3h/agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.