← Back to Skills Marketplace
398
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install workspace-main
Description
Multi search engine integration with 17 engines (8 CN + 9 Global). Supports advanced search operators, time filters, site search, privacy engines, and Wolfra...
Usage Guidance
Don't install blindly. The SKILL.md describes only a simple web_fetch multi-search helper, but the package contains a large evolver engine that reads .env, talks to Git/GitHub, can run node/npm commands, spawn processes, and read workspace memory files. Before installing: (1) ask the publisher for provenance and why the evolver code is bundled with a search skill; (2) review or sandbox the code—especially index.js, src/gep/solidify, and any scripts that call child_process or start networking/heartbeat; (3) ensure no sensitive .env or tokens are present in the environment where you install it; (4) if you must try it, run in an isolated container or restricted environment with Node and Git available but no credentials, and do not run daemon/--loop modes until you audit behavior. If you are not comfortable reviewing Node code, prefer not to install this skill.
Capability Analysis
Type: OpenClaw Skill
Name: workspace-main
Version: 1.0.0
The bundle contains a highly complex self-evolution engine ('Capability Evolver') that enables an AI agent to analyze its own logs, generate code patches, and share 'evolutionary assets' with a remote hub (evomap.ai). While the bundle includes extensive safety mechanisms—such as a strict whitelist for validation commands (src/gep/solidify.js), comprehensive regex-based secret redaction (src/gep/sanitize.js), and 'Constitutional Ethics' instructions to prevent harmful behavior—the inherent capabilities for self-modification and external data transmission are high-risk. Furthermore, the primary SKILL.md describes a 'multi-search-engine' tool, which is a minor component compared to the massive underlying evolution framework.
Capability Assessment
Purpose & Capability
SKILL.md claims a lightweight 'multi-search-engine' instruction-only skill (no binaries, no env vars). The repository actually contains a substantial Node.js project (Capability Evolver) with many scripts, a daemon loop, git integration, hooks, and validation logic. The declared requirements (none) conflict with the obvious runtime needs (Node.js >=18, Git) described in README and some scripts. This is an incoherence: much of the codebase does not belong to the simple 'multi-search' purpose.
Instruction Scope
The runtime SKILL.md only shows web_fetch usage for search URLs. However, other documents (AGENTS.md, README, scripts) instruct agents to read workspace files (SOUL.md, USER.md, memory files), load .env, run lifecycle loops, and may execute validation commands. Index.js and solidify logic can run commands and spawn processes. The SKILL.md does not disclose these broader behaviors, so the agent could end up reading local sensitive files or executing code not implied by the public skill description.
Install Mechanism
No install spec is declared (instruction-only), which is low risk by itself, but the repo includes 75+ code files requiring Node/Git to run. There is no declared required binary list though README and scripts assume Node and Git. There are no external downloads, which is good, but the mismatch between 'no install' and a non-trivial codebase is inconsistent and risky if the platform loads/executes these files automatically.
Credentials
SKILL.md claims 'No API keys required' and the registry metadata lists no required env vars, but README and code reference many optional and required env vars for functionality (EVOLVE_STRATEGY, PUBLIC_REMOTE/PUBLIC_REPO/PUBLIC_OUT_DIR, GITHUB_TOKEN / GH_TOKEN for auto-issue reporting, EVOLVER_* settings). index.js loads .env via dotenv. The code can therefore access secrets if present — requesting no env vars in metadata is misleading.
Persistence & Privilege
always: false and user-invocable are standard. However the code includes a daemon/loop mode (node index.js --loop), singleton pid files, self-restart behavior (spawn), lifecycle scripts, and hooks that inject files at agent bootstrap. If invoked (or if the runtime auto-executes package scripts), the skill can create background processes and write files. This is not flagged as 'always: true' but it does have persistence capabilities if run.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install workspace-main - After installation, invoke the skill by name or use
/workspace-main - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of multi-search-engine skill, version 1.0.0.
- Integrates 17 search engines (8 domestic, 9 international) with advanced operator and time filter support.
- No API keys required; enables site-specific, filetype, and privacy searches.
- Includes support for DuckDuckGo bangs and WolframAlpha knowledge queries.
- Documentation links provided for advanced usage guides.
Metadata
Frequently Asked Questions
What is Workspace Main?
Multi search engine integration with 17 engines (8 CN + 9 Global). Supports advanced search operators, time filters, site search, privacy engines, and Wolfra... It is an AI Agent Skill for Claude Code / OpenClaw, with 398 downloads so far.
How do I install Workspace Main?
Run "/install workspace-main" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Workspace Main free?
Yes, Workspace Main is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Workspace Main support?
Workspace Main is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Workspace Main?
It is built and maintained by sonyrw (@sonyrw); the current version is v1.0.0.
More Skills