Auto-Updater Skill

Automatically checks for and applies updates to Clawdbot and all installed skills once daily via cron. Sends the user a message summarizing what was updated and any issues encountered.

OpenClaw analysis

The skill's instructions are consistent with its stated purpose (setting up a daily cron job to update Clawdbot and installed skills); it does not request extra credentials or install arbitrary code itself, but auto-applying updates carries operational risk (trust in the registry and permissions).

Confidence: high

VirusTotal

Type: OpenClaw Skill Name: auto-updater Version: 1.0.0 The 'auto-updater' skill is designed to automatically update Clawdbot and all installed skills via a daily cron job. The `SKILL.md` and `references/agent-guide.md` files contain instructions for the AI agent to set up a shell script (`auto-update.sh`) and a cron job. This script executes legitimate update commands (`npm update -g`, `pnpm update -g`, `bun update -g`, `clawdbot update`, `clawdbot doctor`, `clawdhub update --all`), logs actions locally, and provides a structured summary. While the skill has broad system access necessary for its function, there is no evidence of intentional malicious behavior such as data exfiltration, unauthorized remote execution, persistence beyond the stated cron job, or prompt injection designed to subvert the agent's purpose or security.