Security audit
Security checks across malware telemetry and agentic risk
This OpenClaw updater appears purpose-built rather than malicious, but it has enough authority to change the agent installation, copy credentials/workspace data, run remote installers, delete/restore state, restart services, and create scheduled background checks without strong safety boundaries.
Install only if you want this skill to manage OpenClaw maintenance, not just answer update questions. Require it to stop after assessment until you explicitly approve backup, install/update, restore, restart, or scheduled-check setup. Avoid curl-to-bash or moving-branch installs unless you independently trust and verify the source. Treat created backups as sensitive because they may contain credentials and workspace data, and enable the daily scheduled check only if you know how to audit and remove it.
dst = backup_path / item
if src.exists():
cmd = f'powershell.exe -Command "Copy-Item -Recurse \'{src}\' \'{dst}\'"'
subprocess.run(cmd, shell=True, capture_output=True)
else:
# macOS / Linux - 使用 rsync
rsync_cmd = ['rsync', '-av', '--quiet']"""发送通知（使用系统通知）"""
try:
# macOS
subprocess.run([
"osascript",
"-e", f'display notification "{message}" with title "{title}"'
], check=True)# OpenClaw Update Skill - ClawHub Release ## 📦 Skill Information
description: OpenClaw 版本升级评估与执行技能。工作流程：(1) 检测 agent-reach 可用性（无则引导安装），(2) 检查 GitHub releases 获取最新稳定版，(3) 对比当前版本判断是否需要更新，(4) 分析版本差距和更新日志，(5) 检查 GitHub issues 评估风险，(6) 综合评估打分并给出升级建议，(7) 备份用户配置（防止冲突），(8) 检测安装方式执行对应更新命令，(9) 自动重启 gateway，(10) 提供恢复功能。Use when 用户要求检查 OpenClaw 更新、评估是否升级、或执行版本更新。支持中英双语。 --- # OpenClaw Update Skill ## Multilingual Support / 多语言支持
**macOS / Linux:** ```bash # Add to crontab crontab -e # Add this line (runs at 4:00 AM daily) 0 4 * * * /usr/bin/python3 ~/.openclaw/workspace/skills/openclaw-update/scripts/cron_check.py >> ~/.openclaw/cron_check.log 2>&1
### Setup Cron Task / 设置 Cron 任务 **After installing this skill, offer to create a cron task for automatic daily checks:** **Progress message:** > 🤖 **Setting up automated daily update check...** / **正在设置自动每日更新检查...**
**Progress message:** > 🤖 **Setting up automated daily update check...** / **正在设置自动每日更新检查...** **Create cron task that runs at 4:00 AM daily:** ```bash # Method 1: Using OpenClaw cron (recommended)
### Setup Cron Task / 设置 Cron 任务 **After installing this skill, offer to create a cron task for automatic daily checks:** **Progress message:** > 🤖 **Setting up automated daily update check...** / **正在设置自动每日更新检查...**
### Official Recommended (Re-run Installer) ```bash curl -fsSL https://openclaw.ai/install.sh | bash -s -- --no-onboard ``` ---
**Official recommended method (re-run installer):** ```bash curl -fsSL https://openclaw.ai/install.sh | bash -s -- --no-onboard ``` ---
```bash # macOS / Linux rm -rf ~/.openclaw && cp -r ~/.openclaw.backup.TIMESTAMP ~/.openclaw # Windows PowerShell Remove-Item -Recurse -Force $env:USERPROFILE\.openclaw
```bash # macOS / Linux rm -rf ~/.openclaw && cp -r ~/.openclaw.backup.TIMESTAMP ~/.openclaw # Windows PowerShell Remove-Item -Recurse -Force $env:USERPROFILE\.openclaw
```bash # macOS / Linux rm -rf ~/.openclaw && cp -r ~/.openclaw.backup.TIMESTAMP ~/.openclaw # Windows PowerShell Remove-Item -Recurse -Force $env:USERPROFILE\.openclaw
```bash # macOS / Linux rm -rf ~/.openclaw && cp -r ~/.openclaw.backup.TIMESTAMP ~/.openclaw # Windows PowerShell Remove-Item -Recurse -Force $env:USERPROFILE\.openclaw
65/65 vendors flagged this skill as clean.
No suspicious patterns detected.