← 返回 Skills 市场
173
总下载
0
收藏
1
当前安装
3
版本数
在 OpenClaw 中安装
/install ayao-updater
功能描述
Automatically updates OpenClaw and installed skills on a configurable schedule, handling package manager detection, local changes, and notifications.
使用说明 (SKILL.md)
OpenClaw Auto Update
Keeps OpenClaw and installed ClawHub skills up to date automatically.
Prerequisites
openclawCLI — required foropenclaw update,openclaw gateway restart, and notificationsclawhubCLI — required forclawhub list,clawhub inspect, andclawhub updatepython3— required for loadingconfig.jsonbash4+ — required by the shell scripts for associative arrays and other modern Bash features
Quick Start
1. Install cron job (runs daily at 2 AM by default)
bash ~/.openclaw/workspace/skills/openclaw-auto-update/scripts/install-cron.sh
2. Run manually now
bash ~/.openclaw/workspace/skills/openclaw-auto-update/scripts/update.sh
3. Preview what would be updated (no changes)
bash ~/.openclaw/workspace/skills/openclaw-auto-update/scripts/update.sh --dry-run
Configuration
Create ~/.openclaw/workspace/skills/openclaw-auto-update/config.json:
{
"schedule": "0 2 * * *",
"skipSkills": [],
"skipPreRelease": true,
"restartGateway": true,
"notify": true,
"notifyTarget": null
}
See references/config-schema.md for all options and examples.
What It Does
- Loads JSON config — reads
config.jsonwithpython3and merges defaults - Updates OpenClaw — runs
openclaw update --yes --no-restart; in preview mode it logs the equivalentopenclaw update --dry-run --yes --no-restartcommand without making changes - Finds installed skills — enumerates skills via
clawhub list, with workspace directory fallback - Checks release channel — uses
clawhub inspect \x3Cslug>to skip pre-releases whenskipPreRelease: true - Updates skills — runs
clawhub update \x3Cslug> --no-inputfor each eligible installed skill; in preview mode it only logsclawhub update --allbecause the installedclawhubCLI does not support update dry runs - Protects local changes — skips skills with uncommitted git changes
- Respects skip list — never touches skills in
skipSkills - Restarts gateway — only if OpenClaw version actually changed
- Notifies — sends
openclaw message send --target \x3Ctarget> -m \x3Cmessage>whennotifyTargetis set, otherwiseopenclaw system event --text \x3Cmessage> --mode now
Change Schedule
# Change to 3 AM weekly on Sunday
bash ~/.openclaw/workspace/skills/openclaw-auto-update/scripts/install-cron.sh --schedule "0 3 * * 0"
# Uninstall cron job
bash ~/.openclaw/workspace/skills/openclaw-auto-update/scripts/install-cron.sh --uninstall
Logs
tail -f /tmp/openclaw-auto-update.log
Skip a Specific Skill Permanently
Add to config.json:
{ "skipSkills": ["my-custom-skill", "work-internal"] }
安全使用建议
This skill appears to do what it says: schedule and run OpenClaw and skill updates. Before installing, review and/or run the scripts manually in dry-run mode: 1) Inspect scripts/update.sh to confirm the notification target behavior and any command outputs you consider sensitive. 2) Run update.sh --dry-run to see planned actions; the script also supports a config file at ~/.openclaw/workspace/skills/openclaw-auto-update/config.json or a custom path via OPENCLAW_UPDATE_CONFIG. 3) The install script will modify your crontab and create a cron entry that runs the updater and writes to /tmp/openclaw-auto-update.log — if you do not want persistent scheduling, do not run install-cron.sh. 4) Ensure the openclaw and clawhub binaries on your machine are from trusted sources, because the updater will invoke them. 5) Note the minor naming/path inconsistencies in the files (ayao-updater vs openclaw-auto-update) — confirm you use the correct path when installing. If you want extra caution, run the smoke-test and review the output before enabling the cron job.
功能分析
Type: OpenClaw Skill
Name: ayao-updater
Version: 1.0.2
The ayao-updater skill is designed to automate updates for the OpenClaw platform and its installed skills. It uses standard system tools like bash, python3, and cron to manage update schedules and execute the official 'openclaw' and 'clawhub' CLI commands. The scripts (update.sh, install-cron.sh) include safety features such as shlex-based sanitization for configuration loading and checks for local git modifications to prevent overwriting user changes. No evidence of data exfiltration, unauthorized remote execution, or malicious prompt injection was found.
能力评估
Purpose & Capability
The name/description match the actual behavior: the scripts call openclaw and clawhub to enumerate and update the platform and skills, handle local git changes, and notify the user. Minor inconsistencies in naming/pathing are present (SKILL.md and examples reference openclaw-auto-update, registry slug is ayao-updater, and smoke-test references a different folder), which looks like copy/paste sloppiness rather than malicious redirection.
Instruction Scope
Instructions and scripts stay inside the updater use-case: they read a JSON config (default location or overridden by OPENCLAW_UPDATE_CONFIG), call openclaw/clawhub, check git status of skill directories, write logs to /tmp, and (optionally) install a cron job. They do not embed network endpoints or attempt to read unrelated system files. The scripts will run commands that depend on external CLIs (openclaw, clawhub) — those binaries are executed with the privileges of the user running the updater, so trust in those CLIs is important.
Install Mechanism
No external install/downloads or archive extraction are present; this is an instruction-only skill with local shell scripts. install-cron.sh manipulates the user's crontab (expected for a scheduler) and logs to /tmp. No suspicious URLs or remote code fetching were found.
Credentials
No credentials or sensitive environment variables are requested. Optional environment overrides (OPENCLAW_UPDATE_CONFIG, OPENCLAW_WORKSPACE) are documented and reasonable. The scripts rely on the presence of openclaw, clawhub, python3, and bash, which is proportionate to the stated purpose.
Persistence & Privilege
The skill does not set always:true. It can install a persistent cron job (via install-cron.sh) which will run the updater on the schedule — this is expected for an auto-updater but is a persistent change to the user's crontab that the user must opt into. It writes logs to /tmp and invokes system commands (including optional gateway restart).
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install ayao-updater - 安装完成后,直接呼叫该 Skill 的名称或使用
/ayao-updater触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
fix: handle openclaw update non-zero exit when already up to date
v1.0.1
Fix core logic: use openclaw update + clawhub update; fix arg parsing, config hardening, is_locally_modified, cross-platform compat, add smoke-test
v1.0.0
Initial release of ayao-updater.
- Automatically updates OpenClaw and all installed skills on a configurable schedule.
- Supports npm, pnpm, and yarn; detects package manager automatically.
- Protects locally-modified skills by skipping them.
- Lets you skip specific skills or pre-release versions via config.
- Sends Telegram notifications on completion or failure.
- Includes scriptable setup for cron scheduling and manual runs.
元数据
常见问题
Ayao Updater 是什么?
Automatically updates OpenClaw and installed skills on a configurable schedule, handling package manager detection, local changes, and notifications. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 173 次。
如何安装 Ayao Updater?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install ayao-updater」即可一键安装,无需额外配置。
Ayao Updater 是免费的吗?
是的,Ayao Updater 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Ayao Updater 支持哪些平台?
Ayao Updater 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Ayao Updater?
由 ayao99315(@ayao99315)开发并维护,当前版本 v1.0.2。
推荐 Skills