Auto-Updater Skill
maximeprades/auto-updater
Automatically update Clawdbot and all installed skills once daily. Runs via cron, checks for updates, applies them, and messages the user with a summary of what changed.
Runtime requirements
Runtime requirements🔄 ClawdisOSmacOS · Linux
Security scan
Security ScanVirusTotalVirusTotalBenignView report →OpenClawOpenClawBenignhigh confidenceThe skill's instructions are consistent with its stated purpose (setting up a daily cron job to update Clawdbot and installed skills); it does not request extra credentials or install arbitrary code itself, but auto-applying updates carries operational risk (trust in the registry and permissions).Details ▾✓Purpose & CapabilityThe name/description match the instructions: SKILL.md explains creating a cron job that runs clawdbot and clawdhub update commands. The actions (npm/pnpm/bun update, clawdbot update, clawdhub update --all) are proportional to 'auto-update' functionality. Note: the skill assumes clawdbot/clawdhub and package managers exist on the system even though required binaries are not explicitly declared in metadata.ℹInstruction ScopeInstructions are narrowly focused on updating Clawdbot and skills, creating a helper script under ~/.clawdbot/, logging to ~/.clawdbot/logs/, and adding a cron job. They do not instruct reading unrelated files or exfiltrating data. However, the runtime commands will perform network operations and modify installed software; the guide also suggests using sudo/permission fixes when necessary — so the agent will be able to perform privileged actions if the environment allows them.✓Install MechanismThis is an instruction-only skill with no install spec and no code files — minimal installer risk. It writes a helper script and cron job at runtime (user home), which is expected for this functionality.ℹCredentialsNo environment variables or credentials are requested, which is appropriate. Important security consideration: the skill automatically trusts whatever the registry/ClawdHub provides when running 'clawdhub update --all' and will apply updates without interactive review unless the user configures otherwise. Automatic updates increase the attack surface if the registry, ClawdHub, or package update channels are compromised.ℹPersistence & PrivilegeThe skill does not force permanent inclusion (always:false) and is user-invocable, but it does create a cron job and helper script that persist and run daily under the user's account. That persis…