OpenClaw Updater v2

• Risk level: Low
• Analyzed: Feb 16, 2026, 4:14 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill is an instruction-only wrapper that invokes the local 'openclaw' CLI to check and run updates; its requests and instructions match its stated purpose and it does not ask for unrelated credentials or install code.

This skill is instruction-only and simply runs your local 'openclaw' CLI; install it only if you trust that binary and the system's update mechanism. If you plan to allow autonomous runs, be aware the agent could run 'openclaw update run' when it sees an update — consider enabling backups, testing updates in a staging environment, and not running update commands as root. If you use OPENCLAW_UPDATE_CHECK_URL, verify the URL points to a trusted source (to avoid pointing updates at an attacker-controlled server). If you want extra safety, review the local 'openclaw' binary's provenance before installing the skill.