← 返回 Skills 市场

OpenClaw Updater (LinZ)

Name: OpenClaw Updater (LinZ)
Author: zlin87468-maker

作者 zlin87468-maker · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

150

总下载

当前安装

版本数

在 OpenClaw 中安装

/install linz-openclaw-updater

功能描述

Automatically check for and install OpenClaw updates. Use when the user wants to update OpenClaw to the latest version, schedule automatic updates, or check...

使用说明 (SKILL.md)

OpenClaw Updater

Automatically check for and install OpenClaw updates with backup and rollback support.

Overview

This skill provides automated OpenClaw update capabilities:

Check current vs latest version
Perform safe updates with automatic backups
Schedule periodic auto-updates via cron
Dry-run mode to preview updates

Quick Start

Check Current Version

openclaw --version

Check for Updates (Dry Run)

bash ~/.openclaw/workspace/skills/openclaw-updater/scripts/update-openclaw.sh --dry-run

Perform Update

bash ~/.openclaw/workspace/skills/openclaw-updater/scripts/update-openclaw.sh

Force Reinstall

bash ~/.openclaw/workspace/skills/openclaw-updater/scripts/update-openclaw.sh --force

Setting Up Auto-Updates

Daily Auto-Update via Cron

Add to crontab for daily update checks at 3 AM:

0 3 * * * /bin/bash ~/.openclaw/workspace/skills/openclaw-updater/scripts/update-openclaw.sh >> ~/.openclaw/logs/cron-update.log 2>&1

Or use OpenClaw's built-in cron:

{
  "name": "openclaw-auto-update",
  "schedule": { "kind": "cron", "expr": "0 3 * * *" },
  "payload": {
    "kind": "systemEvent",
    "text": "Run OpenClaw auto-updater: bash ~/.openclaw/workspace/skills/openclaw-updater/scripts/update-openclaw.sh"
  },
  "sessionTarget": "main"
}

How It Works

Version Check: Compares installed version against npm registry
Backup: Creates timestamped backup of config and workspace
Update: Runs npm install -g @openclaw/core@latest
Verify: Confirms new version is installed
Cleanup: Maintains only last 5 backups

Logs and Backups

Logs: ~/.openclaw/logs/auto-update.log
Backups: ~/.openclaw/backups/openclaw-backup-YYYYMMDD-HHMMSS.tar.gz

Troubleshooting

Node.js Version Issues

OpenClaw requires Node.js >= 22.16.0. If you see version warnings:

# Check current Node version
node --version

# Update Node.js (using n or nvm)
n install 22.16.0
# or
nvm install 22.16.0 && nvm use 22.16.0

Update Fails

Check logs: cat ~/.openclaw/logs/auto-update.log
Verify npm permissions: npm config get prefix
Try with sudo if needed: sudo npm install -g @openclaw/core@latest

Rollback

If update causes issues, restore from backup:

cd ~
tar -xzf ~/.openclaw/backups/openclaw-backup-YYYYMMDD-HHMMSS.tar.gz

Script Options

Option	Description
`--dry-run`	Check for updates without installing
`--force`	Force update even if versions match
`--help`	Show usage information

Resources

scripts/

update-openclaw.sh - Main update script with backup/restore capabilities

安全使用建议

This updater appears to do what it claims, but check these points before installing or scheduling it: 1) The script runs npm install -g which modifies global packages and may require sudo — be comfortable granting that or run tests in a sandbox. 2) Verify the npm package names (@openclaw/core or openclaw) on the npm registry and confirm the package publisher is trusted. 3) Ensure you have Node.js >=22.16.0 and that npm/node/tar are available (the metadata did not list these required binaries). 4) Use --dry-run first and inspect the created backups in ~/.openclaw/backups before relying on automated cron runs. 5) Because the skill source/homepage is unknown, consider reviewing the script locally (it is included) and, if you automate it, restrict cron to run under an account with appropriate permissions and monitor ~/.openclaw/logs/auto-update.log.

功能分析

Type: OpenClaw Skill Name: linz-openclaw-updater Version: 1.0.0 The skill is a legitimate utility for updating the OpenClaw tool. It includes a shell script (scripts/update-openclaw.sh) that checks the current version against the npm registry, creates local backups of configuration files, and performs updates using standard npm commands. No evidence of data exfiltration, malicious persistence, or prompt injection was found.

能力评估

ℹ Purpose & Capability

The name/description claim an updater for OpenClaw and the SKILL.md plus the included script implement that behavior (version check via npm, backup, install, verification, rollback). One minor inconsistency: registry metadata lists no required binaries, but the script expects node, npm, tar (and possibly notify); these should have been declared.

✓ Instruction Scope

The SKILL.md instructs the agent to run the included script and to optionally schedule it via cron; the script's actions (reading/writing under $HOME/.openclaw, creating backups, querying npm, running npm install -g) are in-scope for an updater. The instructions do not read unrelated system files or exfiltrate data to unexpected endpoints.

✓ Install Mechanism

This is an instruction-only skill with an included shell script (no installer). The script uses npm to fetch packages from the npm registry, which is expected for a Node-based updater. No arbitrary external download URLs or archive extraction from unknown hosts are used.

✓ Credentials

The skill requests no secrets or credentials. It uses only standard environment values (HOME) and an optional OPENCLAW_UPDATE_LOG override; that is proportionate to its purpose.

✓ Persistence & Privilege

always is false and the skill does not request permanent elevated privileges. It suggests adding a cron job (user-controlled) and does not modify other skills or global agent settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install linz-openclaw-updater
安装完成后，直接呼叫该 Skill 的名称或使用 /linz-openclaw-updater 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: Auto-update OpenClaw with backup support, backup before update, cron support

元数据

Slug linz-openclaw-updater

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题