← 返回 Skills 市场
87
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install cross-platform-skill-updater
功能描述
用于检查或更新通过 git 工作树、或通过 .skill-lock.json 这类锁文件方式安装的本地 skills。适用于用户提到“查 skill 更新”“更新 skill”“检查 skills”“同步 skills”“GitHub skill 更新”“OpenClaw skills 更新”“全局 skills...
使用说明 (SKILL.md)
Skill Updater
用于统一检测并更新跨平台安装的 skills。
适用范围
- 支持 git 工作树型安装
- 支持
.skill-lock.json型安装 - 默认扫描当前项目和常见全局目录
- 支持 OpenClaw 的
~/.openclaw/skills与~/.openclaw/workspace/skills - 默认只做手动
check/update
推荐命令
sh skills/skill-updater/scripts/skill-updater check
sh skills/skill-updater/scripts/skill-updater update
sh skills/skill-updater/scripts/skill-updater check --source pbakaus/impeccable --json
sh skills/skill-updater/scripts/skill-updater update --path ~/.agents
sh skills/skill-updater/scripts/skill-updater check --path ~/.openclaw/workspace
自然语言触发示例
- 查 skill 更新
- 更新 skill
- 检查 skills
- 同步 skills
- 看看哪些 skill 要更新
- 更新 GitHub 装的 skills
- 检查 OpenClaw skills
- 检查全局 skills
- 只看有风险的 skill
- 输出 skill 状态 JSON
- 检查
pbakaus/impeccable
安全规则
- 遇到 git
dirty/ahead/diverged默认跳过 - 遇到锁文件来源异常、本地目录缺失或本地内容漂移默认跳过
- 更新前会为锁文件型安装做备份
安全使用建议
Before installing or running this skill: 1) Understand it requires the git CLI (not declared) — ensure git is installed and available. 2) Run in 'check' (dry-run) mode first to see what it would change; avoid running 'update' until you review outputs. 3) It scans and may write into user/global skill directories (e.g., ~/.openclaw, ~/.agents); if you have sensitive files there, review them first. 4) Git network operations (fetch/pull/clone) will use your existing git authentication (SSH keys, credential helpers) to contact remotes referenced by repos or .skill-lock.json; examine any lockfiles or repo URLs to ensure they point to trusted sources. 5) Note the documentation and recommended command names mismatch the included filename (scripts/skill-updater vs scripts/skill_updater.py); confirm which executable/wrapper exists before running. 6) If you want extra safety, run the script in a temporary/sandboxed environment or inspect scripts/skill_updater.py and the lockfiles it will read to verify remote URLs and update logic.
功能分析
Type: OpenClaw Skill
Name: cross-platform-skill-updater
Version: 1.0.1
The skill bundle is a legitimate utility designed to manage and update AI agent skills across multiple platforms (e.g., Claude, Cursor, OpenClaw). The Python script (scripts/skill_updater.py) implements standard Git operations and lockfile management to synchronize local directories with remote repositories, including safety checks for uncommitted changes and a backup mechanism (tar.gz) before updates. No evidence of data exfiltration, malicious prompt injection, or unauthorized persistence was found; the broad file system access is strictly aligned with the tool's stated purpose of maintaining skill directories.
能力评估
Purpose & Capability
Name/description match the included code: the script inspects git-based skills and .skill-lock.json installations and can update them. However the metadata/SKILL.md declare no required binaries while the implementation relies heavily on the git command-line tool (subprocess calls to git, fetch, pull, clone). Also the README/SKILL.md recommend running a path like scripts/skill-updater/scripts/skill-updater (hyphen), while the repository contains scripts/skill_updater.py (underscore) — a mismatch that may indicate missing wrapper scripts or inaccurate docs.
Instruction Scope
SKILL.md and README explicitly instruct scanning the current project and many user/global directories (including ~/.openclaw/* and other provider dirs) and running check/update commands. That is consistent with the code, which reads skill folders, computes hashes, and runs git operations. Be aware 'check' will run git fetch and read local files; 'update' will write backups and overwrite local skill folders for lockfile updates. These behaviors are within stated scope but they include network calls and filesystem writes to user directories.
Install Mechanism
No install spec is provided (instruction-only), and files are included in the bundle. No external download/install step is declared, so nothing will be automatically fetched/installed by the skill itself at install time. This is the lower-risk install model.
Credentials
The skill requests no environment variables or credentials, but implicitly depends on git and the host's git authentication setup: running git fetch/pull/clone will use any existing SSH keys (~/.ssh), credential helpers, or environment Git credentials. That implicit use of local credentials is not declared in metadata and can cause the skill to access remote repositories using your existing auth. The code does not appear to exfiltrate secrets, but it will cause network requests authenticated with whatever git credentials exist on the host.
Persistence & Privilege
The skill does not request always:true or other elevated installation privileges. It performs operations only when invoked (check/update) and writes backups/lockfile updates as part of its update flow. No evidence it modifies other skills' configs beyond updating lockfiles and skill directories it manages.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install cross-platform-skill-updater - 安装完成后，直接呼叫该 Skill 的名称或使用
/cross-platform-skill-updater触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Added support for OpenClaw skills directories (`~/.openclaw/skills` and `~/.openclaw/workspace/skills`)
- Updated documentation and usage examples to include OpenClaw-relevant commands and triggers
- No breaking changes; existing functionality remains intact
v1.0.0
Initial release of skill-updater.
- Enables unified checking and updating of locally installed skills across platforms.
- Supports both git worktree and .skill-lock.json installation types.
- Default scan covers current project and common global directories.
- Provides check/update commands; operations are manual by default.
- Skips risky updates (e.g., git dirty/diverged, lockfile anomalies, missing dirs).
- Backs up lockfile-based installations before updating.
元数据
常见问题
Skill Updater 是什么？
用于检查或更新通过 git 工作树、或通过 .skill-lock.json 这类锁文件方式安装的本地 skills。适用于用户提到“查 skill 更新”“更新 skill”“检查 skills”“同步 skills”“GitHub skill 更新”“OpenClaw skills 更新”“全局 skills... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 87 次。
如何安装 Skill Updater？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install cross-platform-skill-updater」即可一键安装，无需额外配置。
Skill Updater 是免费的吗？
是的，Skill Updater 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Skill Updater 支持哪些平台？
Skill Updater 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Skill Updater？
由 vicwang（@viccwang）开发并维护，当前版本 v1.0.1。
推荐 Skills