← 返回 Skills 市场

Auto Updater.Bak 2026 01 28T18:01:13+10:30

Name: Auto Updater.Bak 2026 01 28T18:01:13+10:30
Author: nicoataiza

作者 nicoataiza · GitHub ↗ · v1.0.0

darwinlinux ⚠ suspicious

1707

总下载

当前安装

版本数

在 OpenClaw 中安装

/install auto-updater-bak-2026-01-28t18-01-13-10-30

功能描述

Automatically update Clawdbot and all installed skills once daily. Runs via cron, checks for updates, applies them, and messages the user with a summary of what changed.

使用说明 (SKILL.md)

Auto-Updater Skill

Keep your Clawdbot and skills up to date automatically with daily update checks.

What It Does

This skill sets up a daily cron job that:

Updates Clawdbot itself (via clawdbot doctor or package manager)
Updates all installed skills (via clawdhub update --all)
Messages you with a summary of what was updated

Setup

Quick Start

Ask Clawdbot to set up the auto-updater:

Set up daily auto-updates for yourself and all your skills.

Or manually add the cron job:

clawdbot cron add \
  --name "Daily Auto-Update" \
  --cron "0 4 * * *" \
  --tz "America/Los_Angeles" \
  --session isolated \
  --wake now \
  --deliver \
  --message "Run daily auto-updates: check for Clawdbot updates and update all skills. Report what was updated."

Configuration Options

Option	Default	Description
Time	4:00 AM	When to run updates (use `--cron` to change)
Timezone	System default	Set with `--tz`
Delivery	Main session	Where to send the update summary

How Updates Work

Clawdbot Updates

For npm/pnpm/bun installs:

npm update -g clawdbot@latest
# or: pnpm update -g clawdbot@latest
# or: bun update -g clawdbot@latest

For source installs (git checkout):

clawdbot update

Always run clawdbot doctor after updating to apply migrations.

Skill Updates

clawdhub update --all

This checks all installed skills against the registry and updates any with new versions available.

Update Summary Format

After updates complete, you'll receive a message like:

🔄 Daily Auto-Update Complete

**Clawdbot**: Updated to v2026.1.10 (was v2026.1.9)

**Skills Updated (3)**:
- prd: 2.0.3 → 2.0.4
- browser: 1.2.0 → 1.2.1  
- nano-banana-pro: 3.1.0 → 3.1.2

**Skills Already Current (5)**:
gemini, sag, things-mac, himalaya, peekaboo

No issues encountered.

Manual Commands

Check for updates without applying:

clawdhub update --all --dry-run

View current skill versions:

clawdhub list

Check Clawdbot version:

clawdbot --version

Troubleshooting

Updates Not Running

Verify cron is enabled: check cron.enabled in config
Confirm Gateway is running continuously
Check cron job exists: clawdbot cron list

Update Failures

If an update fails, the summary will include the error. Common fixes:

Permission errors: Ensure the Gateway user can write to skill directories
Network errors: Check internet connectivity
Package conflicts: Run clawdbot doctor to diagnose

Disabling Auto-Updates

Remove the cron job:

clawdbot cron remove "Daily Auto-Update"

Or disable temporarily in config:

{
  "cron": {
    "enabled": false
  }
}

Resources

安全使用建议

This skill does what it says (schedules and runs daily updates) and contains only instructions, but it will automatically apply updates to Clawdbot and every installed skill without integrity checks or explicit interactive approval. Before installing: - Consider enabling a dry-run mode first (clawdhub update --all --dry-run) and inspect outputs for a few runs. - Prefer manual or staged updates for third‑party skills, or require human approval before applying updates. - Ensure the Cron job runs as a minimally privileged user and that you have recent backups in case an update breaks things. - Verify the ClawdHub/registry reputation and consider pinning critical skills to known-good versions if possible. - Review the helper script path (~/.clawdbot/scripts/auto-update.sh) and log file location, and inspect logs regularly. Minor metadata note: _meta.json lists owner "maximeprades" while the registry metadata shows a different owner id — not necessarily malicious, but worth confirming the skill's origin before enabling automated updates.

功能分析

Type: OpenClaw Skill Name: auto-updater-bak-2026-01-28t18-01-13-10-30 Version: 1.0.0 The skill is an auto-updater designed to update Clawdbot and its installed skills daily. It achieves this by instructing the agent to create a shell script (`auto-update.sh`) and schedule it via a cron job. While these actions involve high-risk capabilities like system modification and establishing persistence (via cron), they are explicitly aligned with the skill's stated purpose. There is no evidence of intentional harmful behavior such as data exfiltration, unauthorized remote control, or obfuscation. Prompt injection is used to provide functional instructions to the agent for performing updates and reporting, not for malicious objectives. The use of `|| true` in the update script to suppress errors is a minor concern for robustness but not indicative of malicious intent.

能力评估

✓ Purpose & Capability

Name/description align with the runtime instructions: the SKILL.md and references describe adding a cron job that runs clawdbot/clawdhub update commands and reports a summary. The commands and paths referenced (clawdbot, clawdhub, ~/.clawdbot scripts/logs) are coherent with an auto-update purpose.

⚠ Instruction Scope

The instructions instruct the agent to run global package manager updates and 'clawdhub update --all' to apply new versions automatically and to write/run a helper script under ~/.clawdbot. There are no steps for verifying update integrity (no checksums/signatures) or requiring interactive approval before applying updates. Automatic, unattended code installation from a registry can introduce malicious updates if the registry or package is compromised. The script emits an update summary that the agent parses — this is expected, but the skill does not limit what the summary might include (some update outputs could contain sensitive info).

✓ Install Mechanism

This is an instruction-only skill with no install spec and no code files that would be fetched/installed by the skill itself. That minimizes installation risk from the skill bundle itself.

ℹ Credentials

The skill requests no environment variables or external credentials, which is proportional. However, it relies on system package managers and will run commands that may require elevated permissions (global npm/pnpm/bun updates, filesystem writes to ~/.clawdbot), so the user must ensure the executing account has appropriate, limited privileges.

ℹ Persistence & Privilege

The skill adds a cron job (via clawdbot cron add) to persist scheduled execution — this is consistent with its function. It is not marked always:true. Still, granting automatic periodic update capability is a high-impact privilege because it allows future unattended code changes to the agent and its skills; combine that with automatic apply behavior and the blast radius increases.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install auto-updater-bak-2026-01-28t18-01-13-10-30
安装完成后，直接呼叫该 Skill 的名称或使用 /auto-updater-bak-2026-01-28t18-01-13-10-30 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Auto-Updater skill initial release. - Automatically checks for and applies updates to Clawdbot and all installed skills once per day via cron. - Sends a summary message detailing which components were updated and their new versions. - Provides quick setup instructions and manual cron configuration options. - Includes troubleshooting steps and commands for managing updates and cron jobs.

元数据

Slug auto-updater-bak-2026-01-28t18-01-13-10-30

版本 1.0.0

许可证 —

累计安装 2

当前安装数 0

历史版本数 1

常见问题