openclaw-update

OpenClaw 版本升级评估与执行技能。工作流程：(1) 检测 agent-reach 可用性（无则引导安装），(2) 检查 GitHub releases 获取最新稳定版，(3) 对比当前版本判断是否需要更新，(4) 分析版本差距和更新日志，(5) 检查 GitHub issues 评估风险，(6) 综合评估...

This skill appears to do what it says (check GitHub, assess releases/issues, backup ~/.openclaw, and perform updates/restarts). Before installing or running it, consider the following: (1) Backups include a credentials/ directory and are written to your home directory unencrypted — if those files contain secrets you should ensure they are stored/encrypted or deleted after use. (2) The skill will call system commands (openclaw update, rsync, agent-reach, notify utilities, PowerShell on Windows) and may need elevated permissions; run in a test environment first. (3) The README suggests installing agent-reach from a GitHub ZIP and suggests a 'curl | bash' installer for OpenClaw — verify the sources and prefer signed or audited installers. (4) There are minor implementation bugs (e.g., some functions reference random/string without imports in certain paths) which may cause runtime errors; review/run the Python scripts manually before granting them automated execution. (5) If you plan to enable scheduled checks or autonomous invocation, remember the skill can decide to block updates when it finds 'critical' issues; that behavior is intentional but you should confirm you want that policy. If you want a safer rollout: review the scripts, run them locally in dry-run mode, back up secrets elsewhere (or encrypt backups), and only permit the skill to perform updates after you verify outputs.

Type: OpenClaw Skill Name: openclaw-auto-update Version: 1.0.1 The skill implements an automated update mechanism that requires high-privilege system access, including the ability to back up sensitive credentials, modify crontab/Task Scheduler for persistence, and execute remote shell scripts via 'curl | bash' (openclaw.ai/install.sh). It also directs the AI agent to install a dependency ('agent-reach') directly from a specific GitHub ZIP archive (Panniantong/agent-reach), which introduces supply chain risk. While these capabilities are consistent with the stated goal of a system updater, the combination of credential handling, persistence, and remote code execution pathways constitutes a significant security risk.