← Back to Skills Marketplace
484
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install workspace-project-standard
Description
Project workspace setup and documentation standard for OpenClaw agents. Enforces a three-layer documentation system and self-contained project structure. Tri...
Usage Guidance
This skill is a documentation/workspace policy and appears coherent, but it instructs agents to edit global workspace files and to reference credentials. Before installing: (1) review and trust any scripts it will run (scripts/new-project.ps1) — the skill will run that if present; (2) back up AGENTS.md, MEMORY.md, and CREDENTIALS.md and confirm they do not contain raw secrets you don't want agents to modify; (3) restrict the agent's file-write permissions to only the intended workspace directories if possible; (4) enforce a policy that credentials are stored only in secure secret stores (not in plain CREDENTIALS.md or LINKS.md); and (5) test the scaffold flow in an isolated environment first. If you need help checking scripts/new-project.ps1 or locking down CREDENTIALS.md handling, review those files before enabling autonomous runs.
Capability Analysis
Type: OpenClaw Skill
Name: workspace-project-standard
Version: 1.0.1
The skill is suspicious due to instructions that introduce significant vulnerabilities. It instructs the AI agent to execute a PowerShell script (`scripts/new-project.ps1`) and to directly modify its own configuration files (`AGENTS.md`, `MEMORY.md`) by adding user-provided project names. This creates a high risk of prompt injection, where an attacker could potentially inject malicious commands or paths into the agent's memory or whitelist, leading to unauthorized file system access or altered agent behavior, especially if the `<project-name>` input is not properly sanitized.
Capability Assessment
Purpose & Capability
Name and description (project workspace & documentation standard) match the SKILL.md content: templates, directory rules, and update triggers all align with a documentation/workspace policy. The skill requests no binaries, env vars, or installs, which is proportionate for a purely procedural standard.
Instruction Scope
The runtime instructions tell the agent to run a scaffold script (scripts/new-project.ps1) and to create/move/modify files in the workspace root (AGENTS.md, MEMORY.md, CREDENTIALS.md, projects/*). Editing global workspace files and maintaining credential references are within scope for a workspace standard but expand the agent's write scope to system-level documents — this is notable because it can affect other workflows and may surface or restructure sensitive information.
Install Mechanism
No install spec and no code files beyond templates; nothing is written to disk by an installer. This is the lowest-risk install footprint (instruction-only).
Credentials
The skill declares no required environment variables or credentials, which is appropriate. However, templates and LINKs.md explicitly reference a CREDENTIALS.md and suggest '凭据引用' (credential references). The skill does not request secrets itself but instructs agents to document and reference credentials — review how your environment stores/limits access to CREDENTIALS.md and avoid putting raw secrets into documentation files.
Persistence & Privilege
always is false (good) and autonomous invocation is allowed (normal). The main persistence/privilege concern is that the instructions modify shared workspace root files (AGENTS.md, MEMORY.md, CREDENTIALS.md) and enforce moving files between root and project directories; this grants the skill effective write influence over global workspace state and should be constrained by agent permissions and review policies.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install workspace-project-standard - After installation, invoke the skill by name or use
/workspace-project-standard - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Fix skill.json metadata
v1.0.0
- Initial release of workspace-project-standard skill.
- Enforces a strict, self-contained project structure for OpenClaw agents.
- Introduces a three-layer documentation system: workspace summary, project master doc, and links/paths index.
- Standardizes new project setup, workspace cleanup, and documentation creation workflows.
- Defines clear directory rules to prevent temp files from polluting the workspace root.
- Provides templates and update triggers to ensure documentation stays current alongside code.
Metadata
Frequently Asked Questions
What is Workspace Project Standard?
Project workspace setup and documentation standard for OpenClaw agents. Enforces a three-layer documentation system and self-contained project structure. Tri... It is an AI Agent Skill for Claude Code / OpenClaw, with 484 downloads so far.
How do I install Workspace Project Standard?
Run "/install workspace-project-standard" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Workspace Project Standard free?
Yes, Workspace Project Standard is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Workspace Project Standard support?
Workspace Project Standard is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Workspace Project Standard?
It is built and maintained by lnshyo (@lnshyo); the current version is v1.0.1.
More Skills