Clawdbot Workspace Template Review

PassAudited by VirusTotal on May 13, 2026.

Overview

Type: OpenClaw Skill Name: clawdbot-skill-clawdbot-workspace-template-review Version: 0.1.0 The skill's purpose is to compare a Clawdbot workspace against official templates to identify missing sections. The instructions in SKILL.md guide the agent to locate Clawdbot installations using standard commands (`command -v`, `npm root -g`, `pnpm root -g`) and then use `ls`, `sed`, and `diff` to inspect and compare local `.md` files within the Clawdbot root and the user's workspace. All operations are local file system reads and comparisons, directly aligned with the stated purpose. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts to subvert the agent for harmful objectives.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may read and compare local files in the Clawdbot install and workspace when the user invokes this skill.

Why it was flagged

The skill documents local shell commands for listing, reading, and diffing files. This is expected for a template comparison skill and is not hidden or unrelated.

Skill content
Helpful commands (use ad‑hoc CLI tools like `diff`): ... `ls ...` `sed -n '1,200p' ...` `diff -u ...`
Recommendation

Use it only on the intended workspace path and review any proposed file changes before approving them.

What this means

Workspace instruction files may be opened and compared during the review.

Why it was flagged

The files named are persistent workspace or agent-context documents. Reading them is central to the skill, but users should recognize that these local instruction/context files may contain sensitive or customized information.

Skill content
compare their workspace `.md` files (AGENTS, SOUL, USER, IDENTITY, TOOLS, HEARTBEAT, etc.) against the official Clawdbot templates
Recommendation

Check that the selected workspace does not contain unrelated private content, and avoid sharing generated diffs if they reveal sensitive local instructions.