Workspace Project Standard
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent instruction-only workspace documentation skill, with some normal but important local file-organization and persistent-documentation behaviors to review.
This skill appears safe for its stated purpose, but use it deliberately: review any file moves, inspect the referenced scaffold script before running it, and make sure persistent docs such as MEMORY.md, AGENTS.md, and LINKS.md do not contain secret credential values.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Files in the workspace root may be moved into a project tmp folder during cleanup, which could be confusing if the user expected them to stay in place.
The skill gives the agent authority to move files in the workspace root. This is aligned with the workspace-cleanup purpose and scoped to the workspace, but it can still rearrange user files without per-file confirmation.
Any file not on this list → move to its project's `tmp/` immediately.
Before cleanup, ask the agent to list proposed moves or confirm each move, especially in workspaces containing important root-level files.
If the referenced script exists locally, it may perform actions not visible in this skill package.
The skill references a scaffold script, but the provided manifest contains no such script. Its behavior therefore depends on a local file outside these reviewed artifacts.
scripts/new-project.ps1 -Name "<project-name>"
Inspect or create a trusted `scripts/new-project.ps1` before using the scaffold command; otherwise create the directories and templates manually.
Project names, paths, links, run parameters, and credential references may persist in workspace documentation and influence later agent work.
The skill intentionally updates persistent workspace memory/documentation files, which future agents may reuse as context.
Add one row to MEMORY.md project table
Review persistent documentation updates and store only references to credentials, not secret values or tokens.