Workspace Temp

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent and benign, but it uses local OpenClaw config/session information and may copy user-specified files into a workspace temp folder.

This skill appears safe for its stated purpose. Before installing, understand that it relies on local OpenClaw configuration, session lookup, and workspace file writes, and avoid using it with passwords, keys, or other highly sensitive files unless you clean the temp directory afterward.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may read files and write copies into the workspace temp directory when carrying out file-processing tasks.

Why it was flagged

The skill asks for file read/write capabilities and session lookup. This is powerful enough to notice, but it is consistent with managing temporary workspace files.

Skill content
"tools": ["sessions_list", "read", "write"]
Recommendation

Use it for intended temporary-file workflows and review prompts involving sensitive or important files before allowing file operations.

What this means

The skill can learn the configured workspace path and current session identifier.

Why it was flagged

The skill uses local OpenClaw configuration and session metadata to locate the workspace and create a per-session temp path. This is disclosed and fits the stated purpose.

Skill content
requires access to `~/.openclaw/openclaw.json` ... and the `sessions_list` tool
Recommendation

Install only if you are comfortable with the agent using local OpenClaw config and session information for temp-directory routing.

What this means

Sensitive documents copied into temp may remain available in the workspace until removed.

Why it was flagged

The skill may place copies of user-specified files in a persistent workspace temp location, and cleanup is described as optional elsewhere in the workflow.

Skill content
Files processed through this skill may temporarily contain sensitive data in the temp directory.
Recommendation

Avoid processing secrets or credentials with this skill, and periodically clean the workspace temp directory if sensitive files were used.