← 返回 Skills 市场
216
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install upgrade-guardian
功能描述
A cognitive protocol for safely managing and auditing OpenClaw application upgrades. Analyzes configuration-level risks (schema, defaults) and runtime-level...
安全使用建议
This skill is a docs-first, instruction-only upgrade audit protocol and appears coherent with its stated purpose. Before installing or invoking it: 1) Be aware the protocol expects to read local OpenClaw config and logs (openclaw.json, session files, gateway logs) and run OpenClaw CLI commands — grant file/command access only if you trust the agent. 2) It may suggest running backup/cleanup commands; do a manual backup and review any deletion commands before executing. 3) The skill fetches changelogs (network access) which is expected for its task; ensure changelog sources are trusted. 4) If you plan to allow autonomous execution, consider limiting the agent's runtime permissions (or require operator confirmation) for actions that modify files or delete backups. Overall, nothing here is disproportionate or unrelated to upgrade auditing.
功能分析
Type: OpenClaw Skill
Name: upgrade-guardian
Version: 1.0.0
The 'upgrade-guardian' skill is a legitimate cognitive protocol designed to assist agents in auditing and verifying OpenClaw application upgrades. It provides structured guidance for analyzing changelogs, assessing risks, and performing post-upgrade verification using standard CLI tools (e.g., `openclaw doctor`, `jq`, `grep`). The instructions in SKILL.md and the verification commands in references/VERIFICATION_CHECKLIST.md are consistent with the stated purpose of system administration and lack any indicators of malicious intent, such as data exfiltration, unauthorized persistence, or prompt injection aimed at bypassing security controls.
能力评估
Purpose & Capability
Name and description claim an upgrade-audit protocol for OpenClaw; the SKILL.md and reference docs only request actions and data consistent with that purpose (changelog analysis, reading openclaw.json, running verification checks). No unrelated credentials, binaries, or external services are required.
Instruction Scope
Runtime instructions direct the agent to fetch changelogs, parse them, cross-reference openclaw.json and active workflows, generate reports, and run verification commands (openclaw doctor, openclaw status, backup, log checks). Those operations are within scope for upgrade auditing. The docs reference reading workspace and home-path session files and saving reports under workspace-relative kb/logs/ paths — appropriate for an audit tool. There are no instructions to collect or transmit data to unexpected external endpoints.
Install Mechanism
Instruction-only skill with no install spec and no code files. No packages or remote downloads are requested, minimizing persistence and supply-chain risk.
Credentials
The skill does not declare any required env vars, credentials, or config paths beyond reading local OpenClaw config and logs (openclaw.json, ~/.openclaw sessions/logs, workspace kb/). Those data sources are proportionate to performing a pre/post-upgrade audit. No unrelated secrets or external tokens are requested.
Persistence & Privilege
always is false and the skill does not request system-wide persistence. It recommends saving reports inside the agent workspace, which is reasonable for audit artifacts. The skill does include commands that could modify or delete local backups if executed (example backup cleanup patterns), but those are described as operator actions and are reasonable within an upgrade workflow.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install upgrade-guardian - 安装完成后,直接呼叫该 Skill 的名称或使用
/upgrade-guardian触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of the Upgrade Guardian cognitive protocol for OpenClaw application upgrades.
- Provides a multi-phase upgrade process focusing on both configuration-level and runtime-level risks.
- Introduces advanced semantic changelog analysis to identify and prevent silent breaking changes.
- Defines standardized audit, mitigation, and verification procedures with workspace-relative artifact archival.
- Emphasizes conservative risk management and operator involvement throughout the upgrade cycle.
元数据
常见问题
Upgrade Guardian 是什么?
A cognitive protocol for safely managing and auditing OpenClaw application upgrades. Analyzes configuration-level risks (schema, defaults) and runtime-level... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 216 次。
如何安装 Upgrade Guardian?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install upgrade-guardian」即可一键安装,无需额外配置。
Upgrade Guardian 是免费的吗?
是的,Upgrade Guardian 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Upgrade Guardian 支持哪些平台?
Upgrade Guardian 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Upgrade Guardian?
由 Radon Co(@radonx)开发并维护,当前版本 v1.0.0。
推荐 Skills