← 返回 Skills 市场

Skylv Package Updater

Name: Skylv Package Updater
Author: sky-lv

作者 SKY-lv · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

总下载

当前安装

版本数

在 OpenClaw 中安装

/install skylv-package-updater

功能描述

Auto-checks and updates outdated dependencies. Shows changelogs and breaking changes before updating. Triggers: update dependencies, upgrade packages, check...

使用说明 (SKILL.md)

Dependency Updater

Overview

Scans project dependencies and checks for updates, shows changelogs, identifies breaking changes.

When to Use

User asks to "update dependencies" or "check for updates"
Regular maintenance

How It Works

Step 1: Detect package manager

package.json -> npm pyproject.toml -> pip Cargo.toml -> cargo go.mod -> go

Step 2: Check outdated

npm: npm outdated --json pip: pip list --outdated --format=json cargo: cargo outdated

Step 3: Risk assessment

Patch (1.2.3 -> 1.2.4): Low risk - auto-update Minor (1.2.3 -> 1.3.0): Medium - show changelog Major (1.2.3 -> 2.0.0): High - show breaking changes

Output Format

Major Updates: express 4.17.1 -> 5.0.0 [BREAKING changes] Minor Updates: axios 0.21.1 -> 0.21.4 [Bug fixes] Patch Updates: debug 4.3.1 -> 4.3.4 [Security patch]

Update Strategy

Show report first - never update blindly
Update in stages: patches -> minors -> majors
Run tests after each update
Commit each update separately

安全使用建议

This skill appears safe for its intended use, but install it only if you want an agent to inspect and potentially update project dependencies. Run it on a branch, review changelogs and breaking changes, and approve updates before files are changed or commits are created.

功能分析

Type: OpenClaw Skill Name: skylv-package-updater Version: 1.0.0 The skill is a standard dependency management utility designed to identify and update outdated packages across various ecosystems (npm, pip, cargo, go). The instructions in SKILL.md follow best practices, such as performing risk assessments, reporting changes to the user before execution, and running tests after updates. No indicators of data exfiltration, malicious execution, or prompt injection were found.

能力评估

ℹ Purpose & Capability

The stated purpose is dependency maintenance, and the instructions align with that purpose. The capability is still sensitive because updating dependencies can alter project behavior.

ℹ Instruction Scope

The workflow includes safeguards such as showing a report first, staging updates, and running tests, but the phrase 'auto-update' for patch releases means users should ensure approval is required before changes are applied.

ℹ Install Mechanism

This is instruction-only with no install spec or code files. The metadata declares no required binaries, while the instructions reference npm, pip, cargo, and go-style project detection, so the runtime tool requirements are not fully represented in metadata.

ℹ Credentials

Package-manager checks and test runs are proportionate to the skill's purpose, but they may execute local project scripts or contact package registries.

ℹ Persistence & Privilege

The instruction to commit each update separately creates persistent repository changes, which is purpose-aligned and reversible if done on a branch.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install skylv-package-updater
安装完成后，直接呼叫该 Skill 的名称或使用 /skylv-package-updater 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release of skylv-dependency-updater (version 1.0.0). - Automatically checks for and updates outdated project dependencies. - Supports npm, pip, cargo, and go dependency management. - Shows changelogs and highlights breaking changes before performing updates. - Updates are staged by patch, minor, and major levels, with risk assessment for each. - Users can trigger updates or checks with commands like "update dependencies" or "check outdated."

元数据

Slug skylv-package-updater

版本 1.0.0

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 1

常见问题