OpenClaw更新检查

每日检查 OpenClaw 最新版本和 Release Note，分析更新必要性并推送详细更新建议给用户，不主动执行更新。

This skill appears to do what it says (check OpenClaw releases and recommend updates) but there are two important mismatches you should address before installing or enabling it: 1) The runtime instructions call the local 'openclaw' command, yet the skill metadata does not list any required binaries — confirm that the host will have the correct 'openclaw' binary and that you are comfortable allowing the agent to run it. 2) The skill promises to push recommendations via Feishu (feishu_doc/message) but declares no required environment variables or credentials — verify how Feishu authentication will be provided (API token, webhook, bot credentials), where those secrets will be stored, and who can read/send messages using them. Additional practical checks: - Ask the publisher (or inspect skill source) for details about Feishu integration and exact message endpoints; avoid providing global/overly-permissive tokens. - Prefer an implementation that requires explicit environment variables for Feishu and documents required binaries. - If you plan to run this on a schedule, configure the cron job yourself rather than relying on autonomous agent scheduling; ensure the agent's ability to run autonomously is limited if you don't want unattended pushes. - Because source/homepage is unknown, treat provenance as low: prefer skills from known publishers or require code inspection before granting message-sending privileges.

Type: OpenClaw Skill Name: openclaw-update-check Version: 1.0.0 The skill is designed to check for OpenClaw software updates by comparing the local version (via 'exec') with the latest release notes fetched from the official GitHub repository (via 'web_fetch'). It follows a transparent process of analyzing release notes and notifying the user via Feishu without performing any unauthorized actions or automatic updates. No indicators of data exfiltration, malicious execution, or prompt injection were found.