Self-Upgrade (Tianyi)

OpenClaw 自我迭代升级技能。使用场景：配置自动修复、技能更新、依赖安装、版本检查、问题预防性修复。支持安全模式（需用户确认）和自动模式（低风险操作自动执行）。

This skill is coherent with a self-upgrade tool, but review before installing: (1) Inspect the full script to confirm it does not transmit tokens off-machine and logs sensitive values. (2) Confirm that migrating authToken fields is intended — back up current configs and verify rollback works. (3) Remove or parameterize the hard-coded skillsPath (D:\workspace\openclaw_ceo\skills) to avoid touching unrelated directories. (4) Understand what openclaw doctor --fix does on your system (run in DryRun first). (5) Prefer to require explicit user confirmation for medium/high-risk steps and restrict autonomous invocation for those operations. If you cannot review the script or do not trust it to handle secrets safely, do not enable automatic mode.

Type: OpenClaw Skill Name: tianyi-self-upgrade Version: 1.0.0 The skill is designed for self-upgrade and maintenance, which involves legitimate file system modifications (reading/writing `openclaw.json`, creating backups) and executing external commands (`openclaw doctor --fix`, `npm list`). While these actions are aligned with the stated purpose, the execution of external commands and direct file system manipulation are inherently high-risk capabilities. There is no clear evidence of intentional malicious behavior like data exfiltration or backdoor installation. However, the reliance on external commands and the potential for these commands to be exploited or misused, even if unintentionally by the skill's design, elevates the classification to 'suspicious' rather than 'benign'. The `SKILL.md` explicitly defines security constraints and forbidden actions, which is a positive indicator against malicious intent, but the underlying capabilities remain risky.