Security audit
Security checks across malware telemetry and agentic risk
This is a disclosed updater, but it can silently change OpenClaw core and installed skills, so users should review it before installing.
Install only if you intentionally want a privileged updater that can change OpenClaw and installed skills. Before enabling automation, inspect the actual PowerShell script and update source, avoid AutoApprove or Quiet cron runs unless you have backups and rollback, and use limited-scope notification credentials.
|-----------|---------|-------------| | AutoUpdate | false | Apply updates automatically | | SmartTiming | false | Wait for idle + check cron | | AutoApprove | false | Skip approval (for cron) | | NoNotify | false | Skip notifications | | UpdateSkillsOnly | false | Update skills only | | Port | auto | Gateway port |
3. If approved → proceeds with update 4. If rejected/skipped → cancels gracefully Use `-AutoApprove` for unattended runs. ## Smart Notifications
|-----------|---------|-------------| | AutoUpdate | false | Apply updates automatically | | SmartTiming | false | Wait for idle + check cron | | AutoApprove | false | Skip approval (for cron) | | NoNotify | false | Skip notifications | | UpdateSkillsOnly | false | Update skills only | | Port | auto | Gateway port |
```powershell # Check for updates powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 # Auto-update with smart timing powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 -AutoUpdate -SmartTiming
powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 # Auto-update with smart timing powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 -AutoUpdate -SmartTiming ``` ## Install
| SmartTiming | false | Wait for idle + check cron | | AutoApprove | false | Skip approval (for cron) | | NoNotify | false | Skip notifications | | UpdateSkillsOnly | false | Update skills only | | Port | auto | Gateway port | | IdleThreshold | 5 | Minutes of idle to wait | | CronLookAhead | 60 | Minutes to look ahead for tasks |
--- name: self-updater version: 1.4.2 description: | ⭐ OPEN SOURCE! GitHub: github.com/GhostDragon124/openclaw-self-updater
name: self-updater version: 1.4.2 description: | ⭐ OPEN SOURCE! GitHub: github.com/GhostDragon124/openclaw-self-updater ⭐ ONLY skill with Cron-aware + Idle detection! Auto-updates OpenClaw core & skills, analyzes cron schedules to avoid user tasks, waits for idle time, AI-powered risk assessment, user approval for high-risk updates, and smart notifications. Use for: auto-update, maintenance, cron, smart-schedule, skills, gateway, restart, healthcheck, monitoring, ops repository:
Use for: auto-update, maintenance, cron, smart-schedule, skills, gateway, restart, healthcheck, monitoring, ops repository: type: git url: https://github.com/GhostDragon124/openclaw-self-updater homepage: https://github.com/GhostDragon124/openclaw-self-updater#readme required_binaries: - pwsh (PowerShell 5.1+)
repository: type: git url: https://github.com/GhostDragon124/openclaw-self-updater homepage: https://github.com/GhostDragon124/openclaw-self-updater#readme required_binaries: - pwsh (PowerShell 5.1+) - npm
```powershell # Check for updates powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 # Auto-update with smart timing powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 -AutoUpdate -SmartTiming
powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 # Auto-update with smart timing powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 -AutoUpdate -SmartTiming # Full automation (for cron) powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 -AutoUpdate -SmartTiming -AutoApprove -Quiet
powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 -AutoUpdate -SmartTiming # Full automation (for cron) powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 -AutoUpdate -SmartTiming -AutoApprove -Quiet ``` ## AI Risk Assessment
65/65 vendors flagged this skill as clean.
No suspicious patterns detected.
