Workspace Trash
PassAudited by ClawScan on May 10, 2026.
Overview
The skill is a coherent soft-delete tool for OpenClaw files; it uses local file-moving and deletion commands as expected, but users should understand its broad OpenClaw file scope and irreversible trash-emptying action.
This skill appears safe for its stated purpose if you want OpenClaw file deletions to become recoverable trash moves. Review the broad ~/.openclaw scope, do not manually edit the trash manifest, and only empty the trash after checking what will be permanently deleted.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Deletion requests for OpenClaw files may be handled by this skill automatically, changing normal rm/delete behavior into a recoverable move-to-trash workflow.
The skill intentionally changes the agent's behavior for deletion requests so files are trashed instead of permanently removed.
Also use when the agent needs to rm/delete/remove any file — always trash instead of permanently deleting.
Install only if you want this protective behavior, and explicitly request permanent deletion only through the documented trash-emptying flow.
If the trash is emptied, files in the trash cannot be restored through this skill.
The empty action permanently deletes trash contents with rm -rf. This is disclosed and purpose-aligned, but it is irreversible.
find "$TRASH_DIR" -mindepth 1 -not -name '.manifest.json' -exec rm -rf {} +Before running /trash:empty or trash.sh empty, list the trash contents and confirm you no longer need them.
The skill may fail or behave differently if the required local tools are missing, even though the registry summary does not list them.
The registry requirement summary does not declare required binaries, while SKILL.md documents that node and POSIX utilities are needed. This is an installation/preflight clarity issue rather than hidden behavior.
Required binaries (all must exist): none
Ensure node, mv, cp, rm, find, awk, date, basename, and dirname are available before relying on the skill.
If the manifest is modified incorrectly, restore operations may fail or restore files to unexpected locations.
Restore behavior depends on the persistent .manifest.json file, including original paths. This is expected for a trash feature, but corrupted or manually edited manifest entries could affect restore destinations.
const m = JSON.parse(fs.readFileSync(process.env.TRASH_MANIFEST, "utf8")); ... const entry = m[idx]; ... spawnSync("mv", ["--", trashPath, entry.originalPath]Do not manually edit .trash/.manifest.json; future hardening could re-validate manifest paths during restore.