OC Guard

---

name: oc_guard description: Safe OpenClaw config planning/apply workflow with bilingual execution receipts. metadata: {"openclaw":{"requires":{"bins":["python3","openclaw","opencode"]}}}

---

oc-guard Skill

Purpose

All config-changing requests must go through oc-guard. Do not directly edit ~/.openclaw/openclaw.json. When possible, invoke the bundled CLI at {baseDir}/scripts/oc-guard.py.

Hard Rules

1. Use oc-guard plan before apply. 2. High-risk changes require oc-guard apply --confirm. 3. Always return execution receipt first. 4. If command is not executed, return 【模型说明-未执行】. 5. Never claim success without a real oc-guard receipt.

Common Commands

{baseDir}/scripts/oc-guard.py --help

{baseDir}/scripts/oc-guard.py plan ""

{baseDir}/scripts/oc-guard.py apply --confirm ""

{baseDir}/scripts/oc-guard.py plan --proposal

{baseDir}/scripts/oc-guard.py apply --confirm --proposal