safe-update-mergeSafely merge upstream OpenClaw updates without destroying plugin/skill injections, custom UI tabs, or workspace features. Two-phase: Phase 1 (automated) merg...
Install via ClawdBot CLI:
clawdbot install maverick-software/safe-update-mergeGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
rm -rf /Calls external URL not in known-safe list
https://api.openai.com`Uses known external API (expected, informational)
api.openai.comAI Analysis
The skill performs legitimate git operations and system restarts for merging upstream updates, with no evidence of data exfiltration or credential harvesting. The external API reference appears to be a false positive from rule-based scanning, as the skill definition focuses on local git/package management operations. The primary risk is operational (potential downtime from gateway restart) not security/privacy.
Generated Mar 20, 2026
A developer maintaining a forked version of OpenClaw with custom plugins and UI extensions needs to integrate upstream security patches and feature updates. This skill automates the merge process while preserving local modifications, ensuring the platform remains secure and up-to-date without manual conflict resolution.
A corporate team uses a customized OpenClaw instance for internal AI tools, with proprietary integrations and workflows. They require periodic updates from the upstream repository to leverage new capabilities, but must avoid disrupting existing customizations. This skill provides a safe, two-phase update process with optional AI-assisted conflict resolution.
A university runs OpenClaw for research and teaching, with tailored plugins for academic use. IT staff need to apply upstream updates during semester breaks to minimize downtime, while ensuring custom features like specialized UI tabs and workspace tools remain intact after the merge.
A freelancer manages several forked OpenClaw instances for different clients, each with unique customizations. They use this skill to efficiently handle updates across all projects, leveraging automated conflict resolution to save time and reduce errors during merges, while maintaining client-specific modifications.
Offer a monthly subscription service providing automated update management for OpenClaw forks, including conflict resolution and health verification. Revenue is generated through tiered plans based on the number of instances or update frequency, ensuring clients' customizations are preserved with minimal manual intervention.
Provide consulting services to help organizations integrate and customize OpenClaw, with this skill as a core offering for safe updates. Revenue comes from one-time project fees or retainer agreements for ongoing maintenance, focusing on reducing downtime and preserving bespoke features during upgrades.
Host and manage OpenClaw instances for clients, using this skill to automate updates across all hosted environments. Revenue is generated through hosting fees that include update management, ensuring seamless integration of upstream changes while safeguarding client-specific plugins and UI customizations.
💬 Integration Tip
Ensure all prerequisites like Git remotes and CLI tools are configured before running, and use the --dry-run flag first to assess potential conflicts without making changes.
Scored Apr 19, 2026
Audited Apr 17, 2026 · audit v1.0
Automate common Word/WPS document operations on Windows via COM (read text, replace, insert, headings, headers/footers, page breaks, merge, split, export to PDF/TXT, add/replace images). Use for single-document actions (no batch).
Set timers and alarms. When a background timer completes, you receive a System notification - respond with the reminder message (NOT HEARTBEAT_OK) to notify the user.
Control a Mac through natural language — open apps, click buttons, read the screen, type text, manage windows, and automate multi-step tasks via Airpoint's A...
Configure notification channels and conditional alerts. Track what's being watched, log what's been sent.
Native Windows mouse control (move, click, drag) via user32.dll. Use when the user asks you to move the mouse, click, drag, or automate pointer actions on Windows.
Unified notification hub collecting all skill alerts and delivering by priority