Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Improve skill description/docs; daily report now explicitly includes installed npm/pnpm/brew updates from pkg_maint summary.
What This Skill Does
Automates Ubuntu host maintenance by applying apt security patches daily and tracking npm, pnpm, and brew package updates through a 2-day review period before installing them. State files log what is tracked, planned, or blocked per package manager. A Telegram report sends each morning at 09:00 MSK with a summary of what was installed and what is pending.
Separates security patches (applied immediately) from feature updates (held 2 days with automated bug research), reducing the chance of a regression taking down a production host compared to running a blanket upgrade.
When to use it
- Applying apt security patches automatically each morning without manual SSH
- Holding npm dependency upgrades for 2 days while checking for known regressions
- Blocking a specific brew package from upgrading due to a breaking change
- Getting a daily Telegram summary of what changed overnight on a production server
- Auditing package state changes across apt, npm, and brew in one place
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Keep my Ubuntu server packages up to date safely
- 1Runs apt update and applies security patches via unattended-upgrade at 06:00 MSK
- 2Detects outdated npm and brew packages and adds them to tracked state files
- 3Web-searches for bugs and CVE signals for each tracked package after 2 days
- 4Marks packages as planned or blocked based on findings, then installs planned ones on day 3
- 5Sends a Telegram report at 09:00 MSK listing what was installed, what is queued, and what is blocked
Telegram message showing installed packages, pending candidates, and blocked items with reasons
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.