Workspace Database Manager

Workspace Documentation and Tree Database Manager. SQLite-based indexing for all documentation, files, and directory structures with CSV/JSON export capabili...

Security Scan

The skill's documentation describes Python scripts that would scan and index local workspace files, but the published package lacks those scripts and its metadata doesn't match the runtime requirements—this gap and the optional cron-based 'db-maintainer' raise concerns before installing.

Purpose & Capability

SKILL.md claims Python-based scripts (db_manager.py, tree_indexer.py, update_docs_db.py) to build SQLite indexes, and lists Python 3.8+/SQLite3/tree as requirements. The package as published contains only SKILL.md, README.md, INSTALL.md and package.json — no scripts or code to perform the described tasks. Registry metadata also reports no required binaries even though the instructions require Python and sqlite3. This mismatch means the skill as published cannot perform its stated purpose without fetching additional artifacts at install-time.

Instruction Scope

Runtime instructions tell the agent to run scripts that will scan the user workspace (cd ~/.openclaw/workspace) and enumerate files/symlinks and export data. Scanning the workspace is coherent with the stated purpose, but the instructions also recommend installing an optional 'db-maintainer' which runs an install_cron.py to schedule automated updates—this expands scope to persistent scheduled actions. Because the actual scripts are not present for review, it's impossible to verify that the scanning and export behavior is limited to intended paths or that it doesn't read or transmit unrelated data.

Install Mechanism

There is no install spec in the package (instruction-only). The README/INSTALL expect installation via 'clawhub install workspace-db', implying additional artifacts will be fetched at install time. Since the published bundle contains no runtime scripts, the real install likely pulls code from elsewhere; that network-fetched code is not included for review. This increases risk because arbitrary code could be downloaded and executed by the install process.

Credentials

The skill declares no required environment variables or credentials, which is proportionate for a local indexing tool. However, the tool's operations involve reading the workspace directory (~/.openclaw/workspace) and following symlinks; these are sensitive local files even without explicit credential requests. The optional db-maintainer adds potential for background access but is presented as separate/optional.

Persistence & Privilege

The skill itself is not set to 'always' and is user-invocable; autonomous invocation is allowed (platform default). The INSTALL.md/README recommend an optional 'db-maintainer' that runs install_cron.py to create scheduled updates—that would grant persistence. Because that component is optional and not included in the reviewed package, persistence is possible but not proven.

What to consider before installing

Do not install yet. Ask the publisher for the missing runtime scripts (scripts/db_manager.py, tree_indexer.py, update_docs_db.py) and verify their source (Git repo or packaged release). Confirm what 'clawhub install' will download and where it comes from. Before running, review any install-time downloads and any post-install scripts (especially anything that installs cron jobs or system services). If you proceed, install in a disposable environment, inspect the downloaded scripts for network calls, file-write behavior, and which paths they scan, and avoid granting elevated privileges or running as root.

Hybrid database solution for OpenClaw workspace documentation and file indexing.

Features

• docs.db: Documentation index (256+ documents, skills, symlinks)
• tree.db: Directory tree structures (152+ entries)
• Auto-Export: CSV and JSON formats
• Git-Ready: Skill structure for easy publishing

Database Schema

docs.db

documents: id, name, path, category, description, type, has_symlink, symlink_path, last_update
skills: id, name, version, status, description, path
symlinks: id, name, target, source_path, description
categories: id, name, description, priority

tree.db

tree_entries: id, root_path, relative_path, name, type, depth, parent_path, size
tree_scans: id, root_path, max_depth, total_files, total_dirs, total_symlinks

Scripts

Script	Purpose
db_manager.py	Initialize and populate docs.db
tree_indexer.py	Scan directories with tree command
update_docs_db.py	Re-scan all documentations

Usage

# Initialize databases
python3 scripts/db_manager.py

# Index tree structures
python3 scripts/tree_indexer.py

# Update documentation index
python3 scripts/update_docs_db.py

# Query databases
sqlite3 db/docs.db "SELECT * FROM documents WHERE category='websearch'"
sqlite3 db/tree.db "SELECT * FROM tree_entries WHERE type='symlink'"

Exports

Auto-generated in workspace root:

• db_documents.csv/json
• db_skills.csv/json
• db_symlinks.csv/json
• export_tree_*.csv

Installation

clawhub install workspace-db

Requirements

• Python 3.8+
• SQLite3
• tree command (optional, for indexing)