← Back to Skills Marketplace
209
Downloads
2
Stars
0
Active Installs
13
Versions
Install in OpenClaw
/install version-master
Description
Intelligent single-file version management. Save, restore, diff, and clean file snapshots with per-file version history. Activate when users need version con...
Usage Guidance
This skill appears to implement what it claims and does not ask for credentials, but it stores file snapshots in ~/.workbuddy/versions/version-master and exposes snapshots across workspaces. Before installing, consider: (1) Do you accept that versions (including binary content) are persisted outside the workspace in your home directory? (2) Do you want potentially sensitive files to be stored in a global location shared across projects? (3) Avoid allowing 'auto-detect' saves without explicit file paths; prefer to explicitly name files to save. If you need stronger isolation, run the tool in a sandboxed environment or modify the storage_path to a workspace-local directory. If you are unsure, review the full scripts/version_tool.py content in detail or run the code in a hermetic test workspace first.
Capability Analysis
Type: OpenClaw Skill
Name: version-master
Version: 2.1.1
The Version-Master skill is a legitimate utility for local single-file version control. The implementation in `scripts/version_tool.py` includes proactive security measures, such as path traversal protection using `pathlib.Path.resolve()` and `relative_to()` to ensure file operations remain within the workspace. Destructive actions like `restore_version` and `clean_versions` require explicit user confirmation, and the skill includes a backup mechanism (`.version_backup/`) when restoring files. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
Capability Assessment
Purpose & Capability
Name/description (single-file versioning: save, restore, diff, clean) align with the provided code and SKILL.md. The code implements expected behaviors (save_version, list_versions, restore_version, diff, clean) and the manifest does not request unrelated binaries or credentials.
Instruction Scope
Runtime instructions map to the included Python tool and show explicit call signatures. The SKILL.md allows AI 'auto-detection' of which file to save from context — this grants discretionary behavior to the agent and should be used carefully. Safety rules require explicit confirm=True for destructive ops; that is present in the docs and (partially) enforced by the API design.
Install Mechanism
There is no install spec and the skill is instruction + script files only. No external downloads, package installs, or remote code execution URLs are present in the bundle.
Credentials
The skill requires no environment variables or credentials, which is appropriate. However, it writes snapshot data into a global path under the user's home (~/.workbuddy/versions/version-master), meaning file contents are persisted outside the workspace — a privacy/data-protection consideration rather than a credentials mismatch.
Persistence & Privilege
Although the skill does not request elevated platform privileges and 'always' is false, it persists snapshots to the user's home and intentionally shares the storage across workspaces. This cross-workspace sharing can leak snapshots between projects; snapshots (including binary content) are stored long-term on disk. The skill does not modify other skills' configs, but the global storage footprint and cross-workspace accessibility are noteworthy.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install version-master - After installation, invoke the skill by name or use
/version-master - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.1.1
Version 2.1.1 (no file changes detected):
- Version number updated to 2.1.1 in documentation.
- No other updates or code changes present in this release.
v2.1.0
Version 2.1.0 of version-master
- Updated description to emphasize intelligent version management and workspace-safe path handling.
- Refined keywords for more precise skill activation.
- Added explicit documentation of file path security: only allow file paths within the workspace; system-level paths are rejected.
- Documentation reorganized for conciseness and clarity. Core features and usage instructions remain unchanged.
- No changes to code or functionality; documentation update only.
v2.0.1
- Downgraded skill version to 2.0.1 (from 3.0.0), restoring previous documentation.
- Shortened and simplified the skill description and keywords for clarity and improved trigger coverage.
- No code or implementation changes; only documentation (SKILL.md) was updated.
- All core features, usage examples, and safety rules remain consistent with prior versions.
v2.0.0
Version 2.0.0 — Major internal overhaul and simplification.
- Migrated from a multi-directory, multi-class architecture to a streamlined setup focused around scripts/version_tool.py.
- Removed 21 files including business logic, config handling, database models, and infrastructure modules, significantly reducing complexity.
- Added usage reference and a single core script implementing all main functionality.
- All invocations are now routed through scripts/version_tool.py, clarifying and centralizing usage.
- Skill is now targeted at single-file version management with simplified install and usage instructions.
v1.0.8
Version 1.0.8 — Security improvements and better path safety.
- Trusted source management is now limited to protected, non-external methods.
- Path boundary checks added: `copy_directory` ensures destination stays within the storage root.
- Code files (e.g., .py, .js, .ts) are excluded from sensitive content scans to reduce false positives; embedded secrets in source code may be included in snapshots.
- Documentation updated to highlight these security changes and best practices for secret management.
v1.0.7
- Added support for optional environment variables for configuration, storage, limits, encryption, and logging.
- Expanded security section with details on restore integrity, file locking, hook strict mode, encryption, and data storage location.
- Clarified encryption requirements: disabled unless both `VERSIONMASTER_ENCRYPTION_PASSWORD` and `VERSIONMASTER_ENCRYPTION_SALT` are set.
- Updated to version 1.0.7.
v1.0.6
- Removed business/orchestration_service.py, infrastructure/confirmation_manager.py, nlp/intent_parser.py, and requirements-dev.txt.
- Updated documentation for a more concise, method-focused SKILL.md.
- Clarified that methods are invoked directly; intent parsing is handled externally.
- Removed event-driven and AI intent parser details from documentation.
- Streamlined available commands and examples for easier integration and usage.
v1.0.5
- Added requirements-dev.txt for development dependencies.
- SKILL.md now specifies activation_priority as "normal" instead of "high".
- Updated keywords and install sections in SKILL.md for improved clarity and package management.
- Workspace defaults clarified—snapshots are now always stored within the managed project's directory unless overridden.
- Security warnings added for encryption defaults to encourage production-safe configuration.
v1.0.4
- Added detailed configuration instructions, including environment variables and config file options.
- Documented default configuration structure and custom options for storage, logging, and security.
- No code changes; documentation (SKILL.md) updated to guide setup and customization.
- Retains all previous usage instructions and feature overviews.
v1.0.3
Version 1.0.3
- Added new file: infrastructure/encryption.py
- No changes to core functionality or user commands.
- Documentation (SKILL.md) remains unchanged in content.
v1.0.2
- Added config/default_config.json and requirements.txt for configuration and dependency management.
- Added infrastructure/confirmation_manager.py to enhance confirmation mechanisms.
- Removed infrastructure/encryption.py, streamlining infrastructure components.
- SKILL.md improved with quick installation instructions, cross-platform support details, activation priority, keyword metadata, and bilingual (Chinese/English) trigger/command examples.
v1.0.1
Version 1.0.1 – No file changes detected.
- No updates or modifications were made in this release.
- All features and documentation remain unchanged from the previous version.
v1.0.0
Initial release of version-master: an intelligent version management assistant for AI agents.
- Provides file snapshot saving, restoration, comparison, and cleanup features.
- Supports AI-powered naming, natural language references, and intelligent version selection.
- Optimizes storage with incremental snapshots and space management tools.
- Includes robust security with atomic operations, confirmation prompts, and operation logging.
- Features smart cleanup recommendations and advanced filtering for listing and searching versions.
Metadata
Frequently Asked Questions
What is version-master?
Intelligent single-file version management. Save, restore, diff, and clean file snapshots with per-file version history. Activate when users need version con... It is an AI Agent Skill for Claude Code / OpenClaw, with 209 downloads so far.
How do I install version-master?
Run "/install version-master" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is version-master free?
Yes, version-master is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does version-master support?
version-master is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created version-master?
It is built and maintained by hanli (@neuhanli); the current version is v2.1.1.
More Skills