OpenClaw Recovery

跨平台自动备份与健康监控OpenClaw配置，崩溃时自动回滚并发送系统通知，确保服务持续稳定运行。

Security Scan

The skill's files and runtime instructions match its stated purpose (local backup, health-check, auto-rollback of OpenClaw configs); there are no hidden remote endpoints or unrelated credentials requested — but it does back up sensitive auth files locally and installs scheduled tasks, so treat backups as sensitive.

Purpose & Capability

Name/description (auto backup, health checks, rollback) align with the provided scripts (backup, smart-backup, recover, rollback, install/uninstall). All required operations (reading config, restarting gateway, creating cron tasks, notifying) are expected for this purpose.

Instruction Scope

SKILL.md tells the user to run the included install script which generates and installs monitoring/backup scripts. Those scripts read OpenClaw config and auth files (~/.openclaw/openclaw.json, auth-profiles.json, auth-state.json), create backups, run JSON validation and may invoke 'openclaw gateway restart/start'. Reading and backing up auth files is within the stated purpose (full config backups) but is sensitive — the instructions do not transmit these files externally, they only store them under ~/.openclaw/backups.

Install Mechanism

No network download/install spec is present; the skill is instruction + local scripts included in the bundle. install-v2.sh generates per-OS scripts and writes into the user's ~/.openclaw workspace. No remote URLs, no extracted archives fetched at install time — lower risk than remote installs.

Credentials

The skill declares no required environment variables or external credentials. However the scripts explicitly read and copy auth-profiles.json and auth-state.json (which commonly contain API keys/tokens) into the backup directory. This is proportionate to a config-backup tool but increases the sensitivity of the backups and requires the user to protect those files (permissions/encryption).

Persistence & Privilege

The installer will add cron entries (or instruct Task Scheduler on Windows) to run health checks every 5 minutes and daily backups; this is expected for an always-on recovery tool. always:true is not set. The install modifies the user's crontab and creates files under the home directory (~/.openclaw), which is normal for this utility.

Assessment

This package appears to be what it says: a local backup and self-healing tool for OpenClaw. Before installing, consider the following: 1) Backups include auth-profiles.json and auth-state.json (API keys/tokens). If you have sensitive keys there, review or remove them first, or secure the backup directory (restrict permissions or encrypt backups). 2) The installer will add cron jobs (or provide Task Scheduler instructions) to run every 5 minutes — verify and adjust the schedule if you prefer less frequent checks. 3) The scripts call the 'openclaw' CLI (gateway restart/start); ensure that command exists and behaves as you expect on your system. 4) Check ~/.openclaw/backups and ~/.openclaw/logs permissions after install; treat those files as sensitive. 5) The bundle's safe-mode.json is already desensitized, but changelog notes earlier versions included real keys — ensure you obtained this copy from a trusted source. If you want extra safety, inspect the scripts locally, run them with '--dry-run' style checks (or open the generated scripts before adding cron entries), and consider backing up sensitive tokens elsewhere or rotating them after installing.

OpenClaw 自救系统 Skill v2.3.0

适配 OpenClaw 2026.4.x | 更新于 2026-04-10

更新日志

• v2.3.0: 跨平台自动适配（macOS/Linux/Windows）、端口动态读取、密钥脱敏、卸载脚本
• v2.2.0: 真正的健康检查（检查服务响应，不仅仅是进程存在）
• v2.1.0: 适配 OpenClaw 2026.4.x，auth 文件路径更新

跨平台支持

安装时自动检测操作系统，生成适配版本：

• macOS → cron 定时任务 + osascript 通知
• Linux → cron 定时任务 + notify-send 通知
• Windows → 提供 Task Scheduler 命令 + PowerShell 通知

自动备份配置、监控运行状态、崩溃时自动回滚恢复。

功能特性

• 智能备份: 文件变化自动备份 + 每日自动备份
• 健康监控: 每5分钟检查运行状态、磁盘空间、内存使用
• 自动回滚: 崩溃时自动恢复到最近的有效备份
• 系统通知: macOS 弹窗通知恢复状态
• 一键回滚: 手动选择备份时间点恢复
• 保底配置: 所有备份失败时使用安全模式启动
• 配置验证: 备份前自动验证 JSON 格式

安装

# 运行安装脚本
bash ~/.openclaw/workspace/skills/openclaw-recovery/scripts/install-v2.sh

手动操作

# 立即备份
bash ~/.openclaw/workspace/skills/openclaw-recovery/scripts/smart-backup.sh

# 手动检查并恢复
bash ~/.openclaw/workspace/skills/openclaw-recovery/scripts/recover-v2.sh

# 一键回滚（选择备份）
bash ~/.openclaw/workspace/skills/openclaw-recovery/scripts/rollback.sh

# 查看日志
cat ~/.openclaw/logs/recovery.log
cat ~/.openclaw/logs/backup.log

# 卸载
bash ~/.openclaw/workspace/skills/openclaw-recovery/scripts/uninstall.sh

文件说明

• smart-backup.sh - 智能备份（监控变化 + 定时备份）
• recover-v2.sh - 恢复脚本（含健康检查、系统通知）
• rollback.sh - 一键回滚工具
• install-v2.sh - 安装脚本
• safe-mode.json - 保底配置文件

备份策略

• 实时监控: 配置文件变化立即自动备份
• 每日备份: 每天凌晨2点自动备份
• 保留策略:
  • 最近20个备份
  • 7天历史备份（每天保留最新）
• 备份文件: openclaw.json.bak.YYYYMMDD_HHMMSS
• 备份位置: ~/.openclaw/backups/

恢复流程

1. 检测 OpenClaw 运行状态
2. 检查磁盘空间、内存使用
3. 如停止，验证配置文件有效性
4. 无效则尝试回滚（最多10个备份）
5. 所有备份失败则使用保底配置
6. 发送系统通知告知恢复结果

注意事项

• 回滚只影响系统配置（API、端口等）
• 不影响人格设定（SOUL.md）和记忆
• macOS/Linux 需要 cron（系统自带）
• Windows 需要手动设置 Task Scheduler（安装脚本会提示命令）
• fswatch 为可选，用于实时监控配置变化