← 返回 Skills 市场
vilda007

Clawhub Smart Updater

作者 Vilém Kužel · GitHub ↗ · v1.1.1 · MIT-0
cross-platform ⚠ suspicious
62
总下载
0
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install clawhub-smart-updater
功能描述
Intelligently updates ClawHub skills weekly by detecting local changes, backing up, auto-merging safe updates, and flagging conflicts with detailed reports.
使用说明 (SKILL.md)

ClawHub Smart Updater Skill 🔄

Description

Intelligent ClawHub skill updater with smart merge capabilities. Preserves local modifications, detects conflicts, and provides detailed merge recommendations instead of blindly overwriting files.

When to Use This Skill

Use this skill when:

  • You have locally modified skills from ClawHub
  • You want to update skills without losing your changes
  • You need conflict detection and merge recommendations
  • You want automatic backups before updates
  • You prefer safe, conservative updates over risky auto-updates

Key Differences from auto-updater

Feature Smart Updater auto-updater
Local change detection ✅ Yes ❌ No
Conflict detection ✅ Yes ❌ No
Automatic backup ✅ Yes ❓ Unknown
Merge recommendations ✅ Yes ❌ No
Update frequency Weekly (safe) Daily (risky)
Blind overwrite ❌ Never ⚠️ Likely

Installation

# Install via ClawHub
clawhub install clawhub-smart-updater

# The skill installs:
# - smart-update.py (main updater script)
# - restore-backup.py (rollback tool)
# - config.json (configuration)

Usage

Quick Start

# Run smart update check
python skills/clawhub-smart-updater/smart-update.py

# This will:
# 1. Check all installed skills for updates
# 2. Backup current versions
# 3. Download new versions to temp
# 4. Compare and categorize changes
# 5. Generate report with recommendations

Command Line Options

# Dry run (no changes)
python smart-update.py --dry-run

# Update specific skill
python smart-update.py --slug image-with-comfyui

# Force update (skip conflict detection)
python smart-update.py --force

# Verbose output
python smart-update.py --verbose

# Cleanup old backups
python smart-update.py --cleanup-backups --older-than 7

OpenClaw Cron Integration

The skill is designed for OpenClaw cron jobs:

{
  "cron": {
    "jobs": [
      {
        "name": "Weekly Smart Update",
        "schedule": {
          "kind": "cron",
          "expr": "0 10 * * 1",
          "tz": "Europe/Prague"
        },
        "payload": {
          "kind": "agentTurn",
          "message": "Run smart-update.py --report and send summary to user"
        },
        "delivery": {
          "channel": "whatsapp",
          "to": "\x3CYOUR_PHONE_NUMBER>"
        }
      }
    ]
  }
}

How It Works

1. Discovery Phase

clawhub list → Get installed skills
clawhub inspect \x3Cslug> → Get latest version
Compare: local_version vs latest_version

2. Backup Phase

Copy-Item skills/\x3Cslug> skills/\x3Cslug>.backup-YYYY-MM-DD -Recurse

3. Download Phase

clawhub inspect \x3Cslug> --files --output temp/\x3Cslug>-new

4. Analysis Phase

  • Hash all files (SHA-256)
  • Compare with original ClawHub hashes
  • Identify locally modified files
  • Categorize changes:
    • Safe: Docs, configs, untouched files
    • Conflict: Code files modified both upstream and locally

5. Merge Phase

  • Apply safe changes automatically
  • Flag conflicts for manual review
  • Generate diff files
  • Create merge report

6. Report Phase

Generate detailed report:

  • What was updated
  • What needs review
  • Security warnings
  • Statistics

Configuration

config.json

{
  "backup": {
    "enabled": true,
    "retention_days": 7,
    "directory": "skills/.backups"
  },
  "conflict": {
    "auto_backup": true,
    "generate_diff": true,
    "require_manual_review": true
  },
  "notification": {
    "enabled": true,
    "channel": "whatsapp",
    "target": "\x3CYOUR_PHONE_NUMBER>",
    "on_conflict_only": false
  },
  "update": {
    "auto_apply_safe": true,
    "auto_apply_conflicts": false,
    "ignore_whitespace": true
  }
}

Output Examples

Success Report

## Smart Update Report - 2026-05-07

### ✅ Auto-Updated (2 skills):
- image-with-comfyui: 1.4.8 → 1.4.9 (docs only)
- moltbook-interact: 1.0.0 → 1.0.1 (bugfix)

### ⚠️ Manual Review Required (1 skill):
- fusion-bridge: 1.0.2 → 1.0.3
  - Conflict in main.py (lines 45-67)
  - See: temp/fusion-bridge/diff.txt

### Stats:
- Checked: 23 skills
- Updated: 2
- Conflicts: 1
- Backups cleaned: 3

Conflict Report

### ⚠️ fusion-bridge: Conflict Detected

**Local changes:**
- Modified: main.py (custom error handling)
- Modified: SKILL.md (Czech translations)

**Upstream changes:**
- Fixed: main.py (bugfix in connect() function)
- Updated: README.md (new examples)

**Conflict:**
Both local and upstream modified main.py lines 45-67

**Recommendation:**
Manual merge required. Upstream bugfix is important, but preserve custom error handling.

**Actions:**
1. Review: temp/fusion-bridge/diff.txt
2. Merge manually
3. Run: python smart-update.py --accept fusion-bridge

Safety Features

Backup System

  • Automatic pre-update backups
  • Dated backup folders
  • Configurable retention (default: 7 days)
  • Easy rollback with restore-backup.py

Conflict Detection

  • SHA-256 content hashing
  • Tracks which files you've modified
  • Intelligent categorization
  • Diff generation for conflicts

Security

  • VirusTotal integration (warns on SUSPICIOUS)
  • Dependency change detection
  • Permission audit
  • No blind overwrites

Troubleshooting

"Permission denied" error

Cause: File locked by editor or process

Solution:

# Close editors using skill files
# Or force unlock
python smart-update.py --force-unlock

Backup directory too large

Cause: Old backups accumulating

Solution:

python smart-update.py --cleanup-backups --older-than 7

False positive conflicts

Cause: Whitespace changes detected

Solution:

python smart-update.py --ignore-whitespace

Files Included

  • smart-update.py - Main updater script
  • restore-backup.py - Rollback tool
  • config.json - Configuration
  • SKILL.md - This documentation
  • README.md - Extended documentation

Requirements

  • Python 3.10+
  • ClawHub CLI installed
  • Git (optional, for advanced diff)
  • Windows PowerShell (for backup scripts)

License

MIT-0 - Free to use, modify, and redistribute without attribution.

Author

Klepeto 🦞 (vilda)
Created: 2026-05-07
Tested on: Windows 11, Python 3.12

Changelog

1.0.0 (2026-05-07)

  • Initial release
  • Smart merge with conflict detection
  • Automatic backup system
  • Diff generation
  • OpenClaw cron integration
  • WhatsApp reporting
安全使用建议
Treat this as a review-before-install updater. If you use it, first run --dry-run, limit updates with --slug, confirm backups and rollback manually, consider setting auto_apply_safe to false, and avoid enabling cron or WhatsApp delivery until you are comfortable with what information and changes the updater will handle.
功能分析
Type: OpenClaw Skill Name: clawhub-smart-updater Version: 1.1.1 The skill is a utility for managing and updating other OpenClaw skills with conflict detection and backup capabilities. It is classified as suspicious due to several discrepancies and high-risk patterns: it utilizes 'subprocess.run(shell=True)' in 'smart-update.py' which poses a shell injection risk, and its documentation ('SKILL.md', 'README.md') claims security features like VirusTotal integration that are entirely absent from the provided source code. Furthermore, the inclusion of 'VETTING_REPORT.md' appears to be a social engineering attempt to preemptively influence security analysts and bypass automated scanners by dismissing potential flags as false positives. While no explicit evidence of data exfiltration or backdoors was found, the combination of risky execution patterns and deceptive documentation warrants a suspicious classification.
能力标签
crypto
能力评估
Purpose & Capability
The updater purpose is coherent, but the stated default workflow checks all installed skills and automatically applies changes judged safe, which can alter agent behavior across the local skill set.
Instruction Scope
The instructions include bulk update behavior, automatic application of documentation/config changes, and a force mode that skips conflict detection; users should not treat the default run as a harmless report-only action.
Install Mechanism
The package is source-unknown with no homepage, registry requirements are under-declared compared with skill.json, and the documented rollback helper is not present in the supplied file manifest.
Credentials
The script operates over ~/.openclaw/workspace/skills, creates backups and temp directories, downloads skill files, and invokes shell commands; this is proportional to an updater but high-impact.
Persistence & Privilege
Weekly cron usage and backup retention are documented and user-directed rather than hidden, but they create ongoing background update checks if the user enables them.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clawhub-smart-updater
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clawhub-smart-updater 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.1
Added VETTING_REPORT.md explaining false positive Suspicious flag - this is a defensive update tool with user-controlled config.
v1.1.0
Initial release - Intelligent skill updater with smart merge, conflict detection, automatic backups, and diff generation. All config values use placeholders.
v1.0.5
🚨 CRITICAL SECURITY FIX: Remove hardcoded phone number from SKILL.md config example (line 162). All files now use <YOUR_PHONE_NUMBER> placeholder.
v1.0.3
🚨 SECURITY FIX: Add config.json with placeholder phone number. Previous versions (1.0.0-1.0.2) had hardcoded phone in default config. Users must update immediately!
v1.0.2
Fix: Replace hardcoded phone number with placeholder in default config (smart-update.py line 54)
v1.0.1
Fix: Replace hardcoded phone number with placeholder in docs
v1.0.0
Initial release
元数据
Slug clawhub-smart-updater
版本 1.1.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 7
常见问题

Clawhub Smart Updater 是什么?

Intelligently updates ClawHub skills weekly by detecting local changes, backing up, auto-merging safe updates, and flagging conflicts with detailed reports. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 62 次。

如何安装 Clawhub Smart Updater?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawhub-smart-updater」即可一键安装,无需额外配置。

Clawhub Smart Updater 是免费的吗?

是的,Clawhub Smart Updater 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Clawhub Smart Updater 支持哪些平台?

Clawhub Smart Updater 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Clawhub Smart Updater?

由 Vilém Kužel(@vilda007)开发并维护,当前版本 v1.1.1。

💬 留言讨论