Workspace Guardian

• Risk level: Low
• Analyzed: Apr 14, 2026, 1:52 PM
• Findings: 0
• Version: 1.0.9

Overview

The skill's requirements and instructions align with its stated purpose (enforcing file naming and directory structure); it is instruction-only, requests no credentials, and has no install footprint.

This skill is coherent with its stated goal and doesn't request secrets or installs, but it does instruct the agent to create, move, and delete files in the agent's workspaces (including ~/.openclaw/workspace-*/ and default drafts/output/temp locations). Before installing: 1) Decide whether you trust the agent to manage/delete files and ensure important data is backed up; 2) Prefer to explicitly specify project paths when you want files written somewhere specific; 3) Keep the agent configured to prompt before bulk cleanup or deletions if you want manual control; 4) Test the skill in a non-critical workspace first to confirm behavior. If you do not want any automatic cleanup, consider disabling autonomous invocation or requiring confirmations for maintenance actions.