ClawHub Auto Updater

This skill appears to do what it says, but review and accept these tradeoffs before enabling: - Review the proposed auto-update script (~/.clawdbot/scripts/auto-update.sh) before installing to ensure you understand what will run and where logs are written. - Auto-updates run package-manager or git updates, which execute code from upstream sources (npm, pnpm, bun, git). Only enable automated updates if you trust those upstream sources or are comfortable with changes being applied automatically. - Run a dry-run first: use `clawdhub update --all --dry-run` to see what would change. - Be prepared for permission issues (global updates may need sudo) and for migrations (the script runs `clawdbot doctor --yes`, which may apply changes automatically). - Ensure the delivery channel for summaries (where the agent posts update results) is properly configured and secure; the skill itself does not request tokens but may send update summaries to configured providers. - If you rely on critical skills, consider pinning versions or using a staged update policy (test updates before enabling daily automatic application). If you want, I can produce a hardened variant of the script that: uses checksums, limits what gets updated automatically, rotates logs, or notifies you for approval before applying updates.