Openclaw Auto Updater 1.0.0

Automatically update Clawdbot and all installed skills once daily. Runs via cron, checks for updates, applies them, and messages the user with a summary of w...

This skill appears to do what it claims, but take these precautions before enabling auto‑updates: - Prefer a dry-run first: run `clawdhub update --all --dry-run` to see what would change before enabling automatic installs. - Limit delivery endpoints: avoid sending raw update output to public channels (Telegram, email, etc.). Trim or sanitize logs before sending, or deliver only summaries listing package names/versions. - Run updates in an isolated, unprivileged account or container to limit damage if an update is malicious. - Require manual approval for updates to third‑party skills you rely on, or subscribe only to trusted registries/authors. - Keep backups and note how to roll back skill updates (clawdhub rollback or reinstall previous versions). If you want a higher-assurance setup, ask the author/source for signed release verification or configure the updater to only apply updates from an allowlist of skills or publishers.

Type: OpenClaw Skill Name: openclaw-auto-updater-1-0-0 Version: 1.0.0 The skill provides automated update functionality for the Clawdbot core and its skills by scheduling a persistent cron job that executes shell commands (e.g., `npm update -g`, `clawdbot update`, and `clawdhub update`). While these actions are consistent with the stated purpose, the capability to modify system-wide software and establish persistent execution via cron constitutes a high-risk behavior. The implementation in `references/agent-guide.md` specifically instructs the agent to create local shell scripts and manage system configurations, which are sensitive operations that could be abused if the update source were compromised.