oc-guard Skill

Purpose

All config-changing requests must go through oc-guard.

Do not directly edit ~/.openclaw/openclaw.json.

When possible, invoke the bundled CLI at {baseDir}/scripts/oc-guard.py.

Hard Rules

1. Use oc-guard plan before apply.
2. High-risk changes require oc-guard apply --confirm.
3. Always return execution receipt first.
4. If command is not executed, return 【模型说明-未执行】.
5. Never claim success without a real oc-guard receipt.

Common Commands

• {baseDir}/scripts/oc-guard.py --help
• {baseDir}/scripts/oc-guard.py plan ""
• {baseDir}/scripts/oc-guard.py apply --confirm ""
• {baseDir}/scripts/oc-guard.py plan --proposal
• {baseDir}/scripts/oc-guard.py apply --confirm --proposal