← Back to Skills Marketplace
394
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install openclaw-safe-update
Description
Safely verify and apply OpenClaw upgrades with isolated sidecar checks. Use when asked to update OpenClaw, verify a target version before upgrading, avoid gl...
Usage Guidance
This skill appears to do what it says: it downloads a candidate OpenClaw version into ~/.openclaw/versions, runs that candidate in an isolated sidecar on localhost to verify startup, and only performs a global npm -g install when explicitly asked. Before installing: 1) Understand that the script will download and execute code from the public npm registry (this is necessary for verifying the real package but is an execution risk). 2) Review the log at ~/.openclaw/logs/openclaw-sidecar-verify.log if verification fails. 3) Be aware that applying the upgrade runs npm install -g and may require sudo — only allow apply with explicit, informed consent. 4) If you need stronger isolation, run the script inside a disposable VM/container or audit the specific package version you plan to install. If you want higher assurance, request cryptographic signatures or a vetted release channel instead of arbitrary npm versions.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-safe-update
Version: 1.0.1
The skill provides a legitimate and safety-conscious workflow for updating the OpenClaw software. The core script, `scripts/openclaw-safe-update.sh`, implements an isolation-first approach by installing candidate versions into a local directory (`~/.openclaw/versions`) and verifying them via a sidecar process before performing a global upgrade. It includes proper cleanup logic, port collision detection, and explicitly requires user confirmation via the `--apply` flag as instructed in `SKILL.md`, showing no signs of malicious intent or unauthorized data access.
Capability Assessment
Purpose & Capability
Name/description (safe, isolated verify-first upgrades) aligns with required binaries (openclaw, node, npm, curl, bash), the included script, and the platform reference docs. All requested tools are expected for performing an npm-based sidecar verification and global npm install when applying.
Instruction Scope
SKILL.md instructs the agent to run the bundled script and to default to verify-only, inspect logs on failure, and only apply on explicit confirmation. The script only touches ~/.openclaw (versions and logs), uses npm/node to fetch and run the candidate package locally, probes a loopback port, and does not read unrelated system files or exfiltrate data. Behavior stays within the described upgrade/verification scope.
Install Mechanism
No external install spec (instruction-only with included script). The script uses npm to download package versions from the public npm registry and then executes the candidate's entrypoint with node. This is coherent for verifying a package but means the skill will download and execute third-party code from npm into the user's home directory — expected for the task but intrinsically higher-risk than pure configuration actions.
Credentials
The skill declares no required credentials and only uses common env overrides (OPENCLAW_VERSIONS_DIR, LOG_DIR, SIDECAR_*). There are no requests for unrelated secrets or system credentials. The need for sudo on global npm installs is noted in docs and is a standard platform permission issue, not a hidden credential request.
Persistence & Privilege
The skill does not request always:true or other elevated platform privileges. It will create files under ~/.openclaw (candidate installs and logs) and may perform global npm install when run with --apply (which can require elevated permissions). The script itself defaults to verify-only and only applies when given --apply; however the agent could invoke the script with --apply if misused — the SKILL.md relies on the agent to ask for explicit user confirmation before applying.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-safe-update - After installation, invoke the skill by name or use
/openclaw-safe-update - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Docs update: add cron templates and clarify scheduled usage, behavior, and safety notes.
v1.0.0
Initial stable release: verify-first isolated updater with auto port selection, safe apply flow, candidate pruning, and clear failure diagnostics.
Metadata
Frequently Asked Questions
What is OpenClaw Safe Update?
Safely verify and apply OpenClaw upgrades with isolated sidecar checks. Use when asked to update OpenClaw, verify a target version before upgrading, avoid gl... It is an AI Agent Skill for Claude Code / OpenClaw, with 394 downloads so far.
How do I install OpenClaw Safe Update?
Run "/install openclaw-safe-update" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw Safe Update free?
Yes, OpenClaw Safe Update is completely free (open-source). You can download, install and use it at no cost.
Which platforms does OpenClaw Safe Update support?
OpenClaw Safe Update is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw Safe Update?
It is built and maintained by ianchenx (@ianchenx); the current version is v1.0.1.
More Skills