← 返回 Skills 市场
klouddy-cloud

Don't Be Scary

作者 klouddy-cloud · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
32
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install dont-be-scary
功能描述
Update OpenClaw safely on macOS (brew cask install) with automatic snapshot of the npm package + .app bundle, post-update health check, and automatic rollbac...
使用说明 (SKILL.md)

dont-be-scary

Safe OpenClaw update with snapshot + auto-rollback. Survives the gateway restart that would otherwise kill the agent mid-operation.

When to invoke

Trigger when the user requests an OpenClaw update or upgrade. Examples: "update openclaw", "upgrade openclaw", "actualízate", "openclaw update".

Do NOT call openclaw update directly — the gateway restart kills the calling agent before it can verify success or roll back.

How to use

Launch the script detached so it survives the gateway restart:

nohup "\x3Cpath-to-skill>/scripts/safe-update.sh" \x3C/dev/null >/dev/null 2>&1 & disown

Then tell the user: "Update launched in background. You'll get Telegram updates at each step." Do not wait for the script to finish — the gateway restart will likely terminate the current agent session. The user is the source of truth via Telegram.

The script's path inside an installed skill workspace is typically: \x3Cworkspace>/skills/dont-be-scary/scripts/safe-update.sh

What the script does

  1. Reads bot token + chat_id from the user's ~/.openclaw/openclaw.json (Telegram default account, delivery target).
  2. Snapshots /opt/homebrew/lib/node_modules/openclaw and /Applications/OpenClaw.app to /tmp/openclaw-rollback/\x3Ctimestamp>/ (~500MB).
  3. Sends Telegram: "🔄 Updating from \x3CX>".
  4. Runs openclaw update --json (which restarts the gateway by itself).
  5. Health check loop (180s) hitting http://localhost:18789/.
  6. Success → Telegram "✅ \x3CX> → \x3CY>", prunes old snapshots (keeps last 2).
  7. Failure → restores snapshot, restarts gateway via launchctl, Telegram "⚠️ rollback OK".
  8. Critical (rollback also failed) → Telegram urgent message pointing to references/rescue-prompt.md.

Configuration via env vars (all optional)

Defaults match a standard brew install --cask openclaw setup. Override only if non-standard:

  • OPENCLAW_TG_CHAT_ID — Telegram chat to notify (default: auto-detect from delivery.targets[])
  • OPENCLAW_TG_BOT — bot account name in config (default: default)
  • OPENCLAW_CONFIG — path to openclaw.json (default: ~/.openclaw/openclaw.json)
  • OPENCLAW_NPM_DIR — npm install path (default: /opt/homebrew/lib/node_modules/openclaw)
  • OPENCLAW_APP_DIR — .app bundle (default: /Applications/OpenClaw.app)
  • OPENCLAW_GATEWAY_PORT — health check port (default: 18789)
  • OPENCLAW_PLIST — LaunchAgent (default: ~/Library/LaunchAgents/ai.openclaw.gateway.plist)
  • OPENCLAW_BIN — openclaw binary (default: /opt/homebrew/bin/openclaw)
  • OPENCLAW_SNAP_ROOT — snapshot root (default: /tmp/openclaw-rollback)

Requirements

  • macOS with brew cask install of OpenClaw
  • ~500MB free in /tmp
  • Telegram configured in openclaw.json (channels.telegram.accounts.default.botToken + a delivery target with channel: telegram and to: \x3Cchat_id>)
  • python3 and curl available (both shipped with macOS)

If the worst happens

If the script reports 🚨 CRITICAL, the gateway is down and the agent inside OpenClaw can't help itself. Open Claude Code on the same Mac and use the prompt in references/rescue-prompt.md to recover manually.

Logs

  • Per-run log: /tmp/openclaw-update-\x3Ctimestamp>.log
  • Update output: /tmp/openclaw-update-\x3Ctimestamp>.update.json
  • Snapshots retained: 2 most recent in /tmp/openclaw-rollback/
安全使用建议
This skill is reasonable for a user-requested OpenClaw update on macOS, but treat it like a system maintenance script: it runs in the background, changes the OpenClaw installation, restarts the gateway, and uses your Telegram bot configuration for notifications.
功能分析
Type: OpenClaw Skill Name: dont-be-scary Version: 1.0.0 The skill 'dont-be-scary' provides an automated update and rollback mechanism for OpenClaw on macOS. It exhibits high-risk behaviors including reading Telegram bot tokens and chat IDs from the user's 'openclaw.json' configuration, executing detached background scripts via 'nohup' to survive service restarts, and performing recursive deletions and restorations in sensitive directories like '/Applications' and '/opt/homebrew' (scripts/safe-update.sh). While these actions are aligned with the stated purpose of a 'safe update' utility, the combination of credential access, system-level file modification, and instructions for a 'rescue' AI to perform manual recovery (references/rescue-prompt.md) constitutes meaningful high-risk behavior that warrants a suspicious classification.
能力评估
ℹ Purpose & Capability
The stated purpose matches the script: snapshot OpenClaw, run the update, health check, and roll back if needed. The capability is high-impact because it can replace the OpenClaw npm package and app bundle.
ℹ Instruction Scope
The skill says to invoke it only when the user requests an OpenClaw update, but it also instructs the agent to launch the script detached and not wait for completion.
ℹ Install Mechanism
There is no install spec and the registry metadata does not declare macOS or required binaries, even though the skill is Mac-only and depends on OpenClaw, launchctl, python3, curl, and Telegram configuration.
ℹ Credentials
The local file and network access are proportionate to the update/notification purpose: it reads OpenClaw config for Telegram notification details, copies OpenClaw install paths, and checks localhost health.
ℹ Persistence & Privilege
The script is designed to keep running after the agent session may die during gateway restart, but the behavior is disclosed and bounded to a single update run.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install dont-be-scary
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /dont-be-scary 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: safe OpenClaw update with snapshot, health check and auto-rollback. Survives gateway restart, notifies via Telegram.
元数据
Slug dont-be-scary
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Don't Be Scary 是什么？

Update OpenClaw safely on macOS (brew cask install) with automatic snapshot of the npm package + .app bundle, post-update health check, and automatic rollbac... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 32 次。

如何安装 Don't Be Scary？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install dont-be-scary」即可一键安装，无需额外配置。

Don't Be Scary 是免费的吗？

是的，Don't Be Scary 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Don't Be Scary 支持哪些平台？

Don't Be Scary 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Don't Be Scary？

由 klouddy-cloud（@klouddy-cloud）开发并维护，当前版本 v1.0.0。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论