← Back to Skills Marketplace
tempest-01

Skill Updater

by tempest01 · GitHub ↗ · v1.1.1 · MIT-0
cross-platform ✓ Security Clean
272
Downloads
1
Stars
0
Active Installs
12
Versions
Install in OpenClaw
/install skill-auto-updater
Description
Local-modification-preserving clawhub skill updater. Saves changes as diff patch, applies to new versions, reports conflicts clearly. No forced overwrites.
Usage Guidance
This skill appears coherent and implements what it claims. Before installing: (1) run the dry-run (python3 git_update.py) to preview changes and conflicts; (2) manually back up important skill modifications (the script also saves originals and creates .skill-updater/mod.patch under each skill); (3) review mod.patch and .skill-updater/originals before applying updates because those snapshots can contain sensitive data from skill files; and (4) ensure your clawhub CLI is the expected trusted binary, since the updater invokes clawhub inspect/update to fetch new versions.
Capability Analysis
Type: OpenClaw Skill Name: skill-updater Version: 1.1.1 The skill-updater bundle is a legitimate utility designed to update OpenClaw skills while preserving local modifications using standard 'diff' and 'patch' utilities. The Python script (git_update.py) implements a clear workflow for snapshotting files, generating unified diffs, and attempting to merge them after a 'clawhub update' command. There is no evidence of data exfiltration, malicious execution, or prompt injection; the script uses subprocess calls safely with argument lists and restricts its operations to the designated skills directory.
Capability Assessment
Purpose & Capability
Name/description match the requested binaries and env var: it needs python3, clawhub, diff and patch and the OPENCLAW_SKILLS_DIR to find and update clawhub-installed skills. The code reads .clawhub/origin.json to confirm clawhub-installed skills — this is consistent with the updater purpose.
Instruction Scope
SKILL.md and the CLI usage correspond to the behavior implemented in git_update.py. The instructions only reference the declared OPENCLAW_SKILLS_DIR and local operations (diff, patch, clawhub). There are no instructions to read unrelated system files or to transmit data outside of clawhub/standard tooling.
Install Mechanism
This is an instruction-only skill with an included Python script; there is no installer that downloads code from external URLs or modifies system locations. No high-risk install actions are present.
Credentials
The single required env var (OPENCLAW_SKILLS_DIR) is directly relevant. No credentials, tokens, or unrelated env vars are requested. The tool reads and writes files under each skill directory (creates .skill-updater/originals and mod.patch), which is proportionate to preserving modifications.
Persistence & Privilege
The skill is not marked always:true and does not attempt to modify other skills' configs or global agent settings. It writes per-skill metadata under .skill-updater within skill directories only, which is expected behavior for this utility.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install skill-auto-updater
  3. After installation, invoke the skill by name or use /skill-auto-updater
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.1
Fix TypeError: run() now accepts input param. Add diff/patch to requires.bins. SKILL.md English.
v1.1.0
Patch-based local-mod protection. Remove GitHub/SSH.
v1.0.9
v1.0.9: Exact v1.0.4 structure restored + CLAWHUB_TOKEN in metadata
v1.0.8
Clean republish: v1.0.4 description strategy + complete metadata. always:false warning removed.
v1.0.7
v1.0.7: Restore full description strategy (v1.0.4) + metadata fixes (v1.0.6). Remove negative 'Review source code' signal.
v1.0.6
v1.0.6: Strategic description rewrite - broad but not specific, no risky keywords. Add CLAWHUB_TOKEN to requires.env (fixes credentials). Remove Features list to reduce scanner attention on risky operations.
v1.0.5
v1.0.5: Add always:false warning to SKILL.md header for visibility on ClawHub listing
v1.0.4
v1.0.4 BREAKING: Make all write operations opt-in via --apply. Default is now dry-run (read-only). Setup requires --apply to create SSH/cron. Add git ls-remote repo identity verification.
v1.0.3
v1.0.3: clean up remaining QQ references in README, add environment variables table, fix summary-examples.md comments
v1.0.2
v1.0.2: fix /usr/bin/git hardcode, use REPO_DIR in cron template, fix format_summary docstring
v1.0.1
v1.0.1 - Address ClawHub security review: remove false QQ claim, add metadata.requires, make REPO_DIR configurable via env var, add Before Installing checklist
v1.0.0
v1.0.0
Metadata
Slug skill-auto-updater
Version 1.1.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 12
Frequently Asked Questions

What is Skill Updater?

Local-modification-preserving clawhub skill updater. Saves changes as diff patch, applies to new versions, reports conflicts clearly. No forced overwrites. It is an AI Agent Skill for Claude Code / OpenClaw, with 272 downloads so far.

How do I install Skill Updater?

Run "/install skill-auto-updater" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Skill Updater free?

Yes, Skill Updater is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Skill Updater support?

Skill Updater is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Skill Updater?

It is built and maintained by tempest01 (@tempest-01); the current version is v1.1.1.

💬 Comments