← Back to Skills Marketplace
311
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install pg-update
Description
Use when updating ProxyGate CLI or SDK to the latest version. Also triggers proactively when an update notification is shown. Make sure to use this whenever...
Usage Guidance
This skill appears to do what it says (check and install updates for the ProxyGate CLI/SDK), but there are some metadata inconsistencies and operational risks you should consider before installing:
- Metadata mismatch: SKILL.md and the bundled script call 'proxygate', 'npm', and optionally 'pnpm', yet the skill metadata declares no required binaries. Confirm you have Node/npm/pnpm and proxygate installed and that the skill author intentionally omitted these requirements.
- Global installs: The skill tells the agent to run 'npm install -g @proxygate/cli@latest' and to modify project dependencies. Global and project npm installs can run package install scripts with arbitrary code — verify the package source (@proxygate on npm) and prefer to run upgrades manually if you don't trust automatic installs.
- Auto-check script: scripts/check-update.sh writes to ~/.claude/cache and the file header says it runs on SessionStart. Ask the author how/when that script will be invoked. If you do not want autonomous checks or automatic installs, disable model/skill autonomy or run the steps manually.
- Safety steps: inspect the @proxygate packages on the npm registry before upgrading; run npm installs interactively in a terminal you control; back up any important local config (e.g., ~/.proxygate/config.json) before upgrading; and request the skill author to update metadata to list required binaries and to document whether the check script is automatically executed on session start.
If the author clarifies the metadata (adds required binaries) and documents invocation behavior, the skill would be coherent and lower-risk. Until then, treat it with caution and consider running updates yourself rather than allowing autonomous agent installs.
Capability Analysis
Type: OpenClaw Skill
Name: pg-update
Version: 0.2.1
The skill bundle is a standard utility for updating the ProxyGate CLI and SDK. It includes a bash script (scripts/check-update.sh) to check for new versions via npm and instructions in SKILL.md to perform the update using npm install. No evidence of data exfiltration, malicious execution, or prompt injection was found.
Capability Assessment
Purpose & Capability
The skill claims to update the ProxyGate CLI/SDK, which legitimately requires the proxygate binary and a Node/npm (or pnpm) toolchain. However, the skill's metadata lists no required binaries or environment variables despite SKILL.md and the included script invoking proxygate, npm, and pnpm. This is an incoherence in declared requirements vs. actual actions.
Instruction Scope
The SKILL.md instructions stay within the updater's purpose (checking versions via npm view, running npm install -g, updating SDKs, refreshing skills, clearing a cache file). They do cause system changes (global npm installs, modifying project deps) and delete a cache file in ~/.claude/cache; those are expected for an updater but are sensitive operations and should be explicitly disclosed in metadata.
Install Mechanism
There is no install spec (instruction-only), which minimizes supply-chain risk from the skill package itself. The included script makes network calls (npm view) and the runtime steps instruct npm/pnpm installs, so the main risk is the normal npm supply-chain risk from installing @proxygate/cli/@proxygate/sdk — expected for an updater but worth highlighting.
Credentials
The skill does not request credentials or environment variables. It references user-local paths (~/.claude/cache and, in docs, ~/.proxygate/config.json) but does not attempt to read secret environment variables. No disproportionate credential access is requested.
Persistence & Privilege
always is false (good). The included script's header claims it "runs on Claude Code SessionStart" and it writes to ~/.claude/cache/proxygate-update-check.json; metadata does not declare automatic session-start execution. Because the agent may be allowed to invoke skills autonomously (disable-model-invocation is false), the agent could run the updater or the check script without clear user-visible consent — this combination increases risk and should be clarified.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pg-update - After installation, invoke the skill by name or use
/pg-update - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.1
Sync with CLI v0.2.1 — updated commands, descriptions, and examples
v1.0.1
Add openclaw metadata: declare required binaries (proxygate, npm/pnpm)
v1.0.0
- Initial release of pg-update skill for managing ProxyGate CLI and SDK updates.
- Detects and installs the latest versions of ProxyGate CLI and SDK.
- Guides through version checks, updates, and post-update steps.
- Handles update requests and proactive update notifications.
- Skips update if already on the latest version.
- Integrates with related ProxyGate skills for setup, purchase, selling, jobs, and status.
Metadata
Frequently Asked Questions
What is Pg Update?
Use when updating ProxyGate CLI or SDK to the latest version. Also triggers proactively when an update notification is shown. Make sure to use this whenever... It is an AI Agent Skill for Claude Code / OpenClaw, with 311 downloads so far.
How do I install Pg Update?
Run "/install pg-update" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pg Update free?
Yes, Pg Update is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pg Update support?
Pg Update is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pg Update?
It is built and maintained by jwelten (@jwelten); the current version is v0.2.1.
More Skills