← Back to Skills Marketplace
Project OS Organizer
by
Joseph Antonio Bozzo-Horwich
· GitHub ↗
· v1.2.1
576
Downloads
0
Stars
2
Active Installs
4
Versions
Install in OpenClaw
/install project-os-organizer
Description
Privacy-first, chat-first project manager for vibe coders. Track projects, capture updates, and resume work across local folders, Claude/Codex, and GitHub wi...
Usage Guidance
This skill is coherent with its stated purpose, but it can access or index local chat transcripts, home directories, and GitHub only when you explicitly enable those options. Before installing or running: 1) Keep remote-install disabled unless you trust the repository and set PROJECT_OS_ROOT to a local checkout. 2) Only set PROJECT_OS_INCLUDE_CHAT_ROOTS=1 or PROJECT_OS_ENABLE_GITHUB_SYNC=1 if you want those features and understand they will read local chat folders or use your GITHUB_TOKEN / gh CLI. 3) Expect files under ~/.project_os and a local web dashboard at 127.0.0.1:8765 when started. 4) Review the upstream project-os repository (PROJECT_OS_REPO_URL / PROJECT_OS_TRUSTED_REPO_URL) before enabling auto-install. If you want a minimal footprint, leave all optional env flags unset and point PROJECT_OS_ROOT to a vetted local copy.
Capability Analysis
Type: OpenClaw Skill
Name: project-os-organizer
Version: 1.2.1
The skill is classified as suspicious due to several high-risk capabilities, even though they are explicitly opt-in. The `scripts/common.sh` file includes a `git clone` mechanism for remote installation, which, if combined with a user overriding `PROJECT_OS_REPO_URL` to an untrusted source and enabling `PROJECT_OS_ALLOW_REMOTE_INSTALL`, could lead to Remote Code Execution. Additionally, `scripts/setup_test_config.py` enables broad file system scanning (e.g., `$HOME/GitHub`, `$HOME/.claude`) and potential access to `GITHUB_TOKEN` via environment variables (`PROJECT_OS_ENABLE_HOME_DISCOVERY`, `PROJECT_OS_INCLUDE_CHAT_ROOTS`, `PROJECT_OS_ENABLE_GITHUB_SYNC`). While these features are guarded by explicit user opt-ins and a `PROJECT_OS_TRUSTED_REPO_URL` check, their powerful nature and potential for misuse or exploitation (e.g., if the user is socially engineered) elevate the risk beyond benign, without clear evidence of intentional malicious behavior like exfiltration or unauthorized persistence.
Capability Assessment
Purpose & Capability
Name/description (local-first, chat-first project manager) aligns with requested binaries and env vars: only python3 is required and the optional env flags control chat indexing, GitHub sync, home discovery, and remote install. The scripts are wrappers that expect a separate project-os repo (project_os package) and will refuse or require explicit opt-in before performing remote clone/install.
Instruction Scope
SKILL.md directs the agent to run scripts/project_router.sh which in turn runs bootstrap/setup scripts and the project_os Python CLI. Those scripts will scan local roots and (if enabled) conversation roots and GitHub. By default chat indexing, home-discovery, GitHub sync, and remote install are disabled; enabling them is controlled by explicit environment variables (PROJECT_OS_INCLUDE_CHAT_ROOTS, PROJECT_OS_ENABLE_GITHUB_SYNC, PROJECT_OS_ENABLE_HOME_DISCOVERY, PROJECT_OS_AUTO_SETUP and PROJECT_OS_ALLOW_REMOTE_INSTALL).
Install Mechanism
No automated install spec in the registry; this is instruction+script based. Remote install is possible only when two opt-in flags are set and the repo URL matches a TRUSTED_REPO_URL; the remote clone uses a GitHub URL. There are no opaque downloads or URL shorteners in the codebase.
Credentials
The skill requests only PROJECT_OS_ROOT (or explicit remote-install opt-in) plus optional flags for chat/GitHub/home discovery. If you enable GitHub sync, the tooling will look for GITHUB_TOKEN or call the gh CLI; enabling chat indexing or home discovery allows scanning of local chat folders and user home subfolders. These env/credential needs are proportionate but enable access to potentially sensitive local data when turned on.
Persistence & Privilege
always is false and the skill does not request system-wide privileges. It creates data under $HOME/.project_os and may start a local dashboard (binds to PROJECT_OS_HOST:PROJECT_OS_PORT, default 127.0.0.1:8765). Daemonization is handled locally via daemonize_command.py. Nothing modifies other skills or global agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install project-os-organizer - After installation, invoke the skill by name or use
/project-os-organizer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.1
Fix recency logic, simplify dashboard to project-only view, and improve chat transcript readability/noise filtering.
v1.2.0
Chat-based last-modified model, top-5 working snapshot, and simpler recency filtering.
v1.1.0
Security and privacy hardening: disabled implicit remote install, disabled chat/GitHub indexing by default, narrowed discovery, and added explicit opt-in controls.
v1.0.0
Rebranded production release with stronger security hardening, cleaner activity scope controls, and non-technical chat-first UX.
Metadata
Frequently Asked Questions
What is Project OS Organizer?
Privacy-first, chat-first project manager for vibe coders. Track projects, capture updates, and resume work across local folders, Claude/Codex, and GitHub wi... It is an AI Agent Skill for Claude Code / OpenClaw, with 576 downloads so far.
How do I install Project OS Organizer?
Run "/install project-os-organizer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Project OS Organizer free?
Yes, Project OS Organizer is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Project OS Organizer support?
Project OS Organizer is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin, win32).
Who created Project OS Organizer?
It is built and maintained by Joseph Antonio Bozzo-Horwich (@ldodee); the current version is v1.2.1.
More Skills