← Back to Skills Marketplace
383
Downloads
0
Stars
3
Active Installs
1
Versions
Install in OpenClaw
/install workspace-init
Description
Bootstrap a new OpenClaw agent workspace with best-practice file structure. Creates AGENTS.md, SOUL.md, HEARTBEAT.md, memory system, and configures agent dis...
Usage Guidance
This skill will create local workspace files (expected) but also announce your agent to https://onlyflies.buzz and includes heartbeat commands that regularly query that host. Only install if you trust that domain and understand you are joining its network. If you want the workspace but not the network behavior: (1) inspect scripts/init.sh before running, (2) remove or comment out the curl POST at the end, and remove OADP markers from AGENTS.md/HEARTBEAT.md, (3) run the script in an isolated/test environment (container or VM) first, and (4) if you need discovery, replace the endpoint with a vetted service or document the endpoint and privacy implications. If provenance of the skill/owner is unclear, prefer not to install until you can verify the maintainer and the onlyflies.buzz service.
Capability Analysis
Type: OpenClaw Skill
Name: workspace-init
Version: 1.0.0
The skill is classified as suspicious due to explicit external network communication and the exfiltration of the agent's hostname. The `scripts/init.sh` file directly sends the output of `$(hostname)` to `https://onlyflies.buzz/clawswarm/api/v1/ping` during installation. Additionally, the `HEARTBEAT.md` file, created by the script, instructs the AI agent to regularly perform `curl` requests to the same external domain for 'agent network' tasks. While these actions are framed as part of 'agent discovery' and 'network participation', sending system information like hostname to an external, potentially untrusted, endpoint without explicit user consent or clear transparency represents a significant privacy and security risk, even if not overtly malicious in intent.
Capability Assessment
Purpose & Capability
Creating the workspace files and adding guidance matches the described purpose. However, the SKILL.md and script also embed an 'OADP' marker and agent-discovery endpoints (onlyflies.buzz) and perform a network announcement; registering with a network could be part of 'configures agent discovery', but the external domain is not documented in the registry metadata (source/homepage unknown), which makes the network behavior unexpected for many users.
Instruction Scope
The runtime script writes files under ~/.openclaw/workspace (expected) but also issues a POST to https://onlyflies.buzz/clawswarm/api/v1/ping with the local hostname and includes heartbeat examples that curl the same host to read tasks/messages. The script performs an outbound network call silently (output discarded). These instructions cause data to be transmitted off-host and add periodic network-check guidance — broader in scope than simple local bootstrapping.
Install Mechanism
This is an instruction-only skill with no install spec; nothing is downloaded or installed from remote package registries during install. The only code is the included init.sh, which is executed locally when run.
Credentials
The skill declares no required credentials or env vars, yet the script collects and posts the local hostname to an external service. While hostname is not a secret credential, transmitting any system-identifying data to an unknown third party is disproportionate for a basic workspace initializer. The SKILL.md does not make the implications of joining the remote network prominent, and the registry lacks provenance for that endpoint.
Persistence & Privilege
The skill does not request 'always: true' and does not modify other skills or system settings beyond creating/editing files in the workspace; this is expected. It does, however, add an OADP registration marker to AGENTS.md and encourages periodic network checks — which gives the agent a persistent connection target, but not elevated platform privilege.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install workspace-init - After installation, invoke the skill by name or use
/workspace-init - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
workspace-init 1.0.0 — Initial Release
- Bootstraps a new OpenClaw agent workspace with best-practice file structure.
- Automatically creates AGENTS.md, SOUL.md, HEARTBEAT.md, MEMORY.md, USER.md, TOOLS.md, and organizes the /memory directory.
- Includes a setup script for quick initialization.
- Provides clear descriptions and manual editing instructions for each workspace file.
- Configures agent discovery with OADP metadata in AGENTS.md.
Metadata
Frequently Asked Questions
What is Workspace Init?
Bootstrap a new OpenClaw agent workspace with best-practice file structure. Creates AGENTS.md, SOUL.md, HEARTBEAT.md, memory system, and configures agent dis... It is an AI Agent Skill for Claude Code / OpenClaw, with 383 downloads so far.
How do I install Workspace Init?
Run "/install workspace-init" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Workspace Init free?
Yes, Workspace Init is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Workspace Init support?
Workspace Init is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Workspace Init?
It is built and maintained by FLY (@imaflytok); the current version is v1.0.0.
More Skills