by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's description broadly matches an auto-updater, but there are several mismatches and missing artifacts (required binaries listed only inside SKILL.md, OS claim vs registry, and the script it tells you to run is not included) that make the package inconsistent and warrant caution before installing or running it.
评估建议
Proceed cautiously. The skill's documentation refers to running a PowerShell updater script and reading your cron/config files — behaviors that could affect your gateway and may read sensitive command lines from cron. Before installing or running this updater: 1) Inspect the actual scripts (scripts/self-updater.ps1 and any code) in the GitHub repo or ClawHub package — do not run the updater blind. 2) Confirm why npm is required and whether any Node packages will be downloaded/executed. 3) Verify...详细分析 ▾
ℹ 用途与能力
The stated purpose (cron-aware, idle detection, updating core and skills) is plausible and aligns with reading ~/.openclaw/cron/jobs.json and ~/.openclaw/openclaw.json. However the registry metadata says 'no required binaries' while SKILL.md lists pwsh, npm, and clawhub — that mismatch is unexplained. The SKILL.md also says Windows is required for idle detection, but the registry imposes no OS restriction. These inconsistencies reduce confidence that requirements are accurate and minimal.
⚠ 指令范围
SKILL.md instructs running a PowerShell script (scripts/self-updater.ps1) and reading ~/.openclaw/cron/jobs.json and ~/.openclaw/openclaw.json. Reading cron/job files is reasonable for 'cron-aware' behavior, but cron entries often contain arbitrary commands and sensitive data — so reading them is potentially sensitive even if needed. The runtime instructions refer to a script path that is not included in the package; it's unclear whether the agent will fetch and execute remote code. Any updater that restarts the gateway or runs arbitrary install commands should be inspected before execution.
✓ 安装机制
There is no install spec and no code files in the registry copy (instruction-only), so nothing will be written to disk by the registry package itself. That minimizes immediate install-time risk. The Quick Start expects executing a local PowerShell script, but that script is absent from the included files — meaning the user/agent would need to obtain it from the referenced GitHub/ClawHub, which is an additional step outside this package.
ℹ 凭证需求
Optional environment variables for notifications (TELEGRAM_BOT_TOKEN, FEISHU_APP_ID, FEISHU_APP_SECRET) are reasonable for a notifier. However SKILL.md's assertation 'only reads gateway.port' conflicts with its own instruction to read cron jobs (which may contain commands/credentials). Also npm is listed as required without clear justification beyond possible dependency management — that could be unnecessary depending on implementation.
✓ 持久化与权限
The skill does not declare always:true and is user-invocable. It allows autonomous invocation (the platform default) but does not request unusual persistent privileges or modify other skills according to the metadata provided.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.4.22026/3/13
- Added metadata: repository, homepage, required_binaries, and optional_envs for better documentation and integration. - Listed PowerShell, npm, and clawhub as required binaries. - Documented optional environment variables for Telegram and Feishu notifications. - Clarified requirements section and specified that only the gateway port is read from config. - No code changes, only SKILL.md updated for improved clarity and completeness.
● 可疑
安装命令 点击复制
官方npx clawhub@latest install self-updater
镜像加速npx clawhub@latest install self-updater --registry https://cn.clawhub-mirror.com
技能文档
⭐ The ONLY OpenClaw updater with Cron-aware + Idle detection!
Intelligent auto-updater that checks for updates while respecting your scheduled tasks.
为什么 Skill?
| Feature | Other Updaters | This Skill |
|---|---|---|
| Cron-aware | ❌ | ✅ Avoids your scheduled tasks |
| Idle detection | ❌ | ✅ Waits for system idle |
| AI Risk Assessment | ❌ | ✅ Evaluates update impact |
| User Approval | ❌ | ✅ Confirms High-risk updates |
| Smart Notifications | ⚠️ Basic | ✅ Concise, channel-aware |
Features
- 🔒 Cron-aware: Reads ~/.openclaw/cron/jobs.json 到 avoid disrupting scheduled tasks
- ⏳ Idle detection: Waits 对于 system idle 之前 updating (否 interruption!)
- 🧠 AI Impact Assessment: Evaluates risk score (Low/Medium/High) 之前 updating
- ✅ 用户 Approval: Pauses 和 asks 之前 High-risk updates
- 📲 Smart Notifications: Auto-detects Telegram/Feishu, sends concise reports
- 🔄 Dual Updates: Updates both OpenClaw core 和 installed skills
- 🛡️ Auto-restart: Ensures gateway comes back up 之后 updates
- 🌐 Port Auto-detect: Reads gateway port 从 配置 automatically
Quick 开始
# Check for updates
powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1# Auto-update with smart timing
powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 -AutoUpdate -SmartTiming
# Full automation (for cron)
powershell -ExecutionPolicy Bypass -File scripts/self-updater.ps1 -AutoUpdate -SmartTiming -AutoApprove -Quiet
AI Risk Assessment
Evaluates 5 factors to calculate risk score:
| Factor | Weight | Description |
|---|---|---|
| Version Impact | 30% | Major/Minor/Patch |
| Skills Count | 25% | Number of skills to update |
| Gateway Restart | 20% | Restart impact |
| Time Since Update | 15% | Hours since last update |
| Cron Proximity | 10% | Distance to next task |
- 🟢 Low (Score <50): Auto-更新
- 🟡 Medium (Score 50-74): Warning 但是 auto-更新
- 🔴 High (Score ≥75): Requires approval
用户 Approval Flow
When risk is High:
- Shows warning 带有 assessment details
- Waits 对于 confirmation (60s 超时)
- 如果 approved → proceeds 带有 更新
- 如果 rejected/skipped → cancels gracefully
Use -AutoApprove for unattended runs.
Smart Notifications
Pre-更新 (concise):
🔄 OpenClaw Update Check
• Core: 1.2.3 → 1.3.0 (Minor)
• Skills: 3 to update
• Risk: 🟡 Medium
Post-更新:
✅ OpenClaw Updated
• Core: v1.3.0
• Skills: 3 updated
• Gateway: ✅ OK
Auto-detects: Telegram, Feishu
使用 Cases
- ✅ Weekly maintenance automation
- ✅ Keep OpenClaw always up-到-日期
- ✅ Never interrupt scheduled crawler tasks
- ✅ 获取 notified 的 updates
- ✅ Safe auto-updates 带有 risk control
Parameters
| Parameter | Default | Description |
|---|---|---|
| AutoUpdate | false | Apply updates automatically |
| SmartTiming | false | Wait for idle + check cron |
| AutoApprove | false | Skip approval (for cron) |
| NoNotify | false | Skip notifications |
| UpdateSkillsOnly | false | Update skills only |
| Port | auto | Gateway port |
| IdleThreshold | 5 | Minutes of idle to wait |
| CronLookAhead | 60 | Minutes to look ahead for tasks |
| MaxWait | 30 | Max wait time (minutes) |
Requirements
- PowerShell 5.1+ (pwsh)
- npm + clawhub CLI
- Windows (idle detection)
- Reads:
~/.openclaw/openclaw.json(port 仅),~/.openclaw/cron/jobs.json
可选 Environment Variables
| Variable | Description |
|---|---|
TELEGRAM_BOT_TOKEN | Telegram bot token for notifications |
FEISHU_APP_ID | Feishu app ID for notifications |
FEISHU_APP_SECRET | Feishu app secret for notifications |
Note: This skill only reads the gateway.port from config. No credentials are transmitted externally.Tags
auto-update, maintenance, cron, smart-schedule, skills, gateway, restart, healthcheck, monitoring, ops, openclaw, updater, self-maintenance, ai-assessment, user-approval, notification
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制