Workspace Files

Work safely with files inside the OpenClaw workspace sandbox. Use for listing directories, reading text files, writing text files, and searching files by nam...

Security Scan

The skill's code and instructions are consistent with its stated purpose (safe text-file operations confined to a workspace directory); nothing requests unrelated credentials or network access.

Purpose & Capability

Name/description promise file operations inside a workspace sandbox and the included script implements list, read, write, and search operations restricted to a single sandbox root. Required resources (none) match the described functionality.

Instruction Scope

SKILL.md instructs the agent to operate only on relative paths inside the workspace, and the script enforces that by resolving paths and rejecting anything that canonicalizes outside the SANDBOX_ROOT. The commands do not access environment variables, network endpoints, or other system paths.

Install Mechanism

No install spec; the skill is instruction-only with a bundled shell script. Nothing is downloaded or installed from external sources.

Credentials

The skill declares no environment variables, credentials, or config paths. It operates only on the hardcoded sandbox path and does not request secrets or unrelated access.

Persistence & Privilege

always is false and the skill does not modify other skills or system-wide configuration. It reads and writes only inside the declared sandbox path.

Assessment

This skill appears to do exactly what it says: list, read, write, and search text files inside a sandbox. Before installing, confirm the hardcoded SANDBOX_ROOT (/home/cmart/.openclaw/workspace) is the intended workspace on your agent — if your agent uses a different home or user, the path may not exist or could point to another user's files. The script uses realpath to canonicalize and rejects paths that resolve outside the sandbox, which prevents typical path-traversal escapes; still, review whether you want an agent able to write files under that directory. No credentials or network access are requested.

Safe file operations limited to the OpenClaw workspace sandbox.

Sandbox

All paths must stay inside:

/home/cmart/.openclaw/workspace

Do not use this skill for paths outside that sandbox.

Quick Commands

• List a directory
  {baseDir}/scripts/workspace-files.sh list-dir "01_AGENTS"

• Read a text file
  {baseDir}/scripts/workspace-files.sh read-file "TOOLS.md"

• Write a text file
  {baseDir}/scripts/workspace-files.sh write-file "07_OUTPUTS/test.txt" "hola mundo"

• Search files by name
  {baseDir}/scripts/workspace-files.sh search-files "SKILL.md"

Commands Reference

list-dir

{baseDir}/scripts/workspace-files.sh list-dir "<relative_path>"

Examples:

• {baseDir}/scripts/workspace-files.sh list-dir "."
• {baseDir}/scripts/workspace-files.sh list-dir "01_AGENTS"

read-file

{baseDir}/scripts/workspace-files.sh read-file "<relative_path>"

Examples:

• {baseDir}/scripts/workspace-files.sh read-file "TOOLS.md"
• {baseDir}/scripts/workspace-files.sh read-file "01_AGENTS/_REGISTRY.md"

write-file

{baseDir}/scripts/workspace-files.sh write-file "<relative_path>" "<content>"

Example:

• {baseDir}/scripts/workspace-files.sh write-file "07_OUTPUTS/demo.txt" "contenido de prueba"

search-files

{baseDir}/scripts/workspace-files.sh search-files "<pattern>"

Examples:

• {baseDir}/scripts/workspace-files.sh search-files "SKILL.md"
• {baseDir}/scripts/workspace-files.sh search-files "compa"

Notes

• Only use relative paths inside the workspace sandbox.
• Intended for text files and directory inspection.
• Do not use for binary editing.
• Do not assume write access outside the sandbox.