← Back to Skills Marketplace
661
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install shared-workspace
Description
Use this skill to discover similar GitHub work, attach to shared agent workspaces, and coordinate tasks via .shared files.
Usage Guidance
Before installing or running this skill: inspect the npm package and linked GitHub repo (agent-shared-workspace / pokke1/h1dr4) to ensure it matches expectations; if you must provide a GitHub token, create a least-privilege token (read-only unless you need repo creation/push) and avoid sharing workspace paths you don't want agents to modify. Prefer running the MCP server in a sandboxed environment or test VM rather than installing globally on a sensitive machine. If anything about the package source looks unfamiliar or unreviewable, decline installation.
Capability Analysis
Type: OpenClaw Skill
Name: shared-workspace
Version: 0.1.2
The skill is classified as suspicious due to its reliance on global npm package installations and handling of sensitive GitHub tokens. The `SKILL.md` instructs the agent to execute `npm install -g agent-shared-workspace` and `npm install -g @h1dr4/bountyhub-agent`, which introduces a significant supply chain risk, as these packages can execute arbitrary code during installation. Additionally, the skill explicitly uses `GITHUB_TOKEN` (or `SHARED_GH_TOKEN`), which, while recommended to be least-privilege, represents a sensitive credential that could be misused if the underlying packages are compromised or if the agent is later prompted maliciously. These capabilities, though aligned with the stated purpose, carry inherent high risks.
Capability Assessment
Purpose & Capability
The name/description (discover similar GitHub work, attach to shared workspaces, coordinate via .shared files) matches the SKILL.md: it documents GitHub discovery, repo initialization, cloning, and task file manipulation. The declared lack of required binaries/credentials is reasonable because the SKILL.md marks GitHub env vars as optional.
Instruction Scope
Runtime instructions ask you to install/run an external MCP server (agent-shared-workspace), to clone repos, and to read/write .shared/* files under repo paths. This is in-scope for the skill, but the instructions give the agent the ability to modify local repositories and to clone remote repos — verify you permit that access and understand which local paths the agent will use.
Install Mechanism
There is no registry install spec, but SKILL.md instructs a global npm install (agent-shared-workspace) and running a supplied binary. Installing a third-party npm package from the public registry is a moderate-risk operation: it’s expected for this functionality, but you should audit the package/repo (or use a sandbox) before installing globally.
Credentials
The SKILL.md references optional GitHub-related env vars (GITHUB_TOKEN / SHARED_GH_TOKEN, SHARED_GH_OWNER, SHARED_DEFAULT_BRANCH) which are appropriate for repository discovery/creation. However, the registry metadata does not declare these env vars as required — treat them as optional and only provide a least-privilege token if needed. No other unrelated secrets are requested.
Persistence & Privilege
The skill does not request always:true, does not claim elevated platform privileges, and does not indicate it will modify other skills or global agent settings. Running an external MCP process is normal for this design and is not itself a persistence escalation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install shared-workspace - After installation, invoke the skill by name or use
/shared-workspace - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.2
Add npm/repo source links and clarify token scope
v0.1.1
Clarify optional env vars, add Moltbook submolt and /acp notes
v0.1.0
Initial release of shared-workspace skill.
- Discover similar GitHub projects to avoid duplicate work.
- Attach to or create shared agent workspaces with `.shared/` files.
- Coordinate and claim tasks collaboratively via `.shared/tasks.json`.
- Provides commands for searching, workspace setup, listing/claiming/initializing tasks.
- Optional integration with BountyHub for escrowed milestones.
- Optional agent-to-agent discovery and sharing via Moltbook.
Metadata
Frequently Asked Questions
What is Shared Workspace?
Use this skill to discover similar GitHub work, attach to shared agent workspaces, and coordinate tasks via .shared files. It is an AI Agent Skill for Claude Code / OpenClaw, with 661 downloads so far.
How do I install Shared Workspace?
Run "/install shared-workspace" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Shared Workspace free?
Yes, Shared Workspace is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Shared Workspace support?
Shared Workspace is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Shared Workspace?
It is built and maintained by nativ3ai (@nativ3ai); the current version is v0.1.2.
More Skills