OpenClaw工作目录医生

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a purpose-aligned workspace repair guide, but users should verify the external scripts and use dry-run/backups before allowing any file deletion or config changes.

Before using this skill, treat it as a manual repair guide rather than a fully packaged tool. Download scripts only from a trusted source, review them first, run dry-run mode, back up OpenClaw configuration files, and approve deletion or configuration changes only after checking the exact paths.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users would be running code that was not part of this review, so the actual script behavior cannot be verified from the submitted skill package.

Why it was flagged

The skill relies on external scripts from a GitHub repository, but those scripts are not included in the reviewed artifact set and no commit hash or release pin is provided.

Skill content

访问 GitHub 仓库获取脚本：
   https://github.com/maxkandel99-arch/workspace-health

2. 下载 scripts 目录下的脚本：

Recommendation

Inspect the downloaded scripts, prefer a trusted release or pinned commit, and avoid running them if the repository contents differ from the described workspace-repair purpose.

Low

#ASI05: Unexpected Code Execution

What this means

Running scripts can read or modify local files depending on their contents.

Why it was flagged

The skill instructs users to run local PowerShell scripts. This is expected for a workspace diagnostic/repair tool, but it is still local code execution.

Skill content

.\detect-nested-workspace.ps1
.\validate-workspace.ps1
.\fix-nested-workspace.ps1 -DryRun:$true

Recommendation

Run the scripts only after reviewing them, keep dry-run mode enabled first, and execute them from the intended workspace directory.

Low

#ASI02: Tool Misuse and Exploitation

What this means

If the wrong path is selected or confirmed, workspace data or configuration could be changed or removed.

Why it was flagged

The repair workflow can delete directories and edit configuration files, but the artifact states these actions require user confirmation and support dry-run mode.

Skill content

修复功能（需用户确认）
- 删除嵌套目录
- 修复配置文件中的工作目录路径
- 支持演练模式（DryRun）

Recommendation

Use dry-run first, confirm every path before approving deletion, and back up configuration files as the skill recommends.