dependency-tracker

📁 blessonism/openclaw-skills 📅 13 days ago

总安装量

周安装量

#33995

全站排名

安装命令

npx skills add https://github.com/blessonism/openclaw-skills --skill dependency-tracker

Agent 安装分布

cursor 8

opencode 8

github-copilot 7

codex 7

kimi-cli 7

gemini-cli 7

Skill 文档

Dependency Tracker

Track version drift across all OpenClaw dependencies. Detect updates, generate reports, notify Boss.

Quick Start

# 1. Scan â build/refresh the local manifest
python3 scripts/scan.py

# 2. Check â compare local vs remote versions
python3 scripts/check.py

# 3. Report â generate human-readable Markdown report
python3 scripts/report.py

All scripts are in the skill directory: ~/.openclaw/workspace/skills/dependency-tracker/scripts/

What It Tracks

Category	Source	Detection Method
Managed skills (GitHub)	`.skill-lock.json`	GitHub Contents API (git hash compare)
Managed skills (ClewHub)	`_meta.json`	ClewHub API (version compare)
Bundled skills	`/app/skills/`	Tied to OpenClaw version
Workspace skills	`workspace/skills/`	Local git (self-managed)
OpenClaw version	npm registry + GitHub	`npm view` / GitHub Releases API
npm dependencies	`/app/node_modules/`	`npm outdated`
pip packages	system Python	`pip3 list --outdated`
CLI tools	PATH	Version commands

Workflow

On-Demand Check

When user asks to check dependencies:

Run scan.py to refresh the manifest
Run check.py to compare against remote sources
Run report.py to generate the report
Send report summary to user (Telegram)
If unknown-source skills found, notify Boss

Scheduled Check (Cron)

Set up a weekly cron job:

Run all three scripts in sequence
Push report summary to Telegram
Only notify if updates are found or errors occur

Data Files

All runtime data lives in data/ (gitignored from backup):

data/
âââ manifest.json        # Full dependency inventory
âââ check-results.json   # Latest check results
âââ reports/
    âââ YYYY-MM-DD-report.md  # Generated reports

Key Design Decisions

No auto-update: Only detect and report. User decides when to update.
GitHub hash comparison: Uses git hash-object locally vs GitHub Contents API SHA â exact match, no false positives.
Lock file as source of truth: .skill-lock.json (OpenClaw’s managed skill registry) provides repo URLs and install metadata.
Changelog extraction: For GitHub skills with updates, fetches recent commits for context.
Unknown source notification: Skills without traceable source are flagged and reported to Boss.

GitHub 仓库 ↗ ← 返回陌讯 Skills 聚合平台