OpenClaw Workspace

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may use stored personal preferences, past mistakes, deadlines, people, and project history when making workspace recommendations.

Why it was flagged

This directs the agent to consult persistent personal memory and daily notes. That is consistent with the workspace-audit purpose, but it involves sensitive context that may be reused across tasks.

Skill content
Use memory_search on MEMORY.md plus memory/*.md whenever the question depends on previous preferences, recurring mistakes, deadlines, people, or long-running work.
Recommendation

Only use this skill if you are comfortable with it reviewing workspace memory; ask for a scoped audit and inspect any memory-based conclusions before accepting them.

What this means

A poor accepted change could make the agent behave differently in later sessions, remember the wrong things, or apply a flawed workflow repeatedly.

Why it was flagged

The skill targets bootstrap behavior files, memory, and skills, so incorrect recommendations could affect future sessions or repeated workflows. The visible text frames changes as proposals rather than hidden automatic edits.

Skill content
The default audit order is: bootstrap behavior files first, then memory evidence, then skills, then concrete improvement proposals.
Recommendation

Review proposed diffs before applying them, keep backups of important workspace files, and prefer small reversible changes.