← 返回 Skills 市场
311
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install pg-update
功能描述
Use when updating ProxyGate CLI or SDK to the latest version. Also triggers proactively when an update notification is shown. Make sure to use this whenever...
安全使用建议
This skill appears to do what it says (check and install updates for the ProxyGate CLI/SDK), but there are some metadata inconsistencies and operational risks you should consider before installing:
- Metadata mismatch: SKILL.md and the bundled script call 'proxygate', 'npm', and optionally 'pnpm', yet the skill metadata declares no required binaries. Confirm you have Node/npm/pnpm and proxygate installed and that the skill author intentionally omitted these requirements.
- Global installs: The skill tells the agent to run 'npm install -g @proxygate/cli@latest' and to modify project dependencies. Global and project npm installs can run package install scripts with arbitrary code — verify the package source (@proxygate on npm) and prefer to run upgrades manually if you don't trust automatic installs.
- Auto-check script: scripts/check-update.sh writes to ~/.claude/cache and the file header says it runs on SessionStart. Ask the author how/when that script will be invoked. If you do not want autonomous checks or automatic installs, disable model/skill autonomy or run the steps manually.
- Safety steps: inspect the @proxygate packages on the npm registry before upgrading; run npm installs interactively in a terminal you control; back up any important local config (e.g., ~/.proxygate/config.json) before upgrading; and request the skill author to update metadata to list required binaries and to document whether the check script is automatically executed on session start.
If the author clarifies the metadata (adds required binaries) and documents invocation behavior, the skill would be coherent and lower-risk. Until then, treat it with caution and consider running updates yourself rather than allowing autonomous agent installs.
功能分析
Type: OpenClaw Skill
Name: pg-update
Version: 0.2.1
The skill bundle is a standard utility for updating the ProxyGate CLI and SDK. It includes a bash script (scripts/check-update.sh) to check for new versions via npm and instructions in SKILL.md to perform the update using npm install. No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
The skill claims to update the ProxyGate CLI/SDK, which legitimately requires the proxygate binary and a Node/npm (or pnpm) toolchain. However, the skill's metadata lists no required binaries or environment variables despite SKILL.md and the included script invoking proxygate, npm, and pnpm. This is an incoherence in declared requirements vs. actual actions.
Instruction Scope
The SKILL.md instructions stay within the updater's purpose (checking versions via npm view, running npm install -g, updating SDKs, refreshing skills, clearing a cache file). They do cause system changes (global npm installs, modifying project deps) and delete a cache file in ~/.claude/cache; those are expected for an updater but are sensitive operations and should be explicitly disclosed in metadata.
Install Mechanism
There is no install spec (instruction-only), which minimizes supply-chain risk from the skill package itself. The included script makes network calls (npm view) and the runtime steps instruct npm/pnpm installs, so the main risk is the normal npm supply-chain risk from installing @proxygate/cli/@proxygate/sdk — expected for an updater but worth highlighting.
Credentials
The skill does not request credentials or environment variables. It references user-local paths (~/.claude/cache and, in docs, ~/.proxygate/config.json) but does not attempt to read secret environment variables. No disproportionate credential access is requested.
Persistence & Privilege
always is false (good). The included script's header claims it "runs on Claude Code SessionStart" and it writes to ~/.claude/cache/proxygate-update-check.json; metadata does not declare automatic session-start execution. Because the agent may be allowed to invoke skills autonomously (disable-model-invocation is false), the agent could run the updater or the check script without clear user-visible consent — this combination increases risk and should be clarified.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pg-update - 安装完成后，直接呼叫该 Skill 的名称或使用
/pg-update触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.2.1
Sync with CLI v0.2.1 — updated commands, descriptions, and examples
v1.0.1
Add openclaw metadata: declare required binaries (proxygate, npm/pnpm)
v1.0.0
- Initial release of pg-update skill for managing ProxyGate CLI and SDK updates.
- Detects and installs the latest versions of ProxyGate CLI and SDK.
- Guides through version checks, updates, and post-update steps.
- Handles update requests and proactive update notifications.
- Skips update if already on the latest version.
- Integrates with related ProxyGate skills for setup, purchase, selling, jobs, and status.
元数据
常见问题
Pg Update 是什么？
Use when updating ProxyGate CLI or SDK to the latest version. Also triggers proactively when an update notification is shown. Make sure to use this whenever... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 311 次。
如何安装 Pg Update？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pg-update」即可一键安装，无需额外配置。
Pg Update 是免费的吗？
是的，Pg Update 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pg Update 支持哪些平台？
Pg Update 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pg Update？
由 jwelten（@jwelten）开发并维护，当前版本 v0.2.1。
推荐 Skills