Security audit
Security checks across malware telemetry and agentic risk
This appears to be a real maintenance tool, but it needs review because it can overwrite, delete, upload, and automatically update OpenClaw data with limited safeguards.
Install only if you are comfortable with a tool that can back up sensitive OpenClaw data, update installed skills from their git remotes, restore with overwrite/delete behavior, and optionally run unattended through cron. Verify the source and missing entrypoint before use, prefer dry-run/check first, encrypt backups before enabling cloud sync, keep remote_storage.path dedicated to this tool, and enable cron only if automatic future code changes are acceptable.
# Append to crontab
{
crontab -l 2>/dev/null || true
echo ""
echo "$cron_comment"
echo "$cron_cmd"log_info "Removing cron job..." # Remove lines containing update-plus crontab -l 2>/dev/null | grep -v "update-plus" | grep -v "Update Plus" | crontab - log_success "Cron job removed!" return 0
# Version: 4.0.3
# For OpenClaw
# Install cron job for automatic updates
install_cron() {
local cron_schedule="${1:-0 2 * * *}" # Default: 2 AM daily
local script_path="${SCRIPT_DIR}/update-plus"# Update all skills
update_skills() {
if [[ "$DRY_RUN" == true ]]; then
log_dry_run "Would update skills"
log_info "Checking for skill updates..."
update_git_skills
return 0update_git_skills
}
# Update skills via git pull
update_git_skills() {
local skills_dirs_json=$(get_skills_dirs)66/66 vendors flagged this skill as clean.
No suspicious patterns detected.