Multi Workplace

Manage multiple workplaces (project directories) with multi-agent orchestration, isolated memory, and inter-agent communication. Use when the user mentions:...

This skill appears to do what it says, but it operates on and modifies local files and uses user-editable Markdown to build system prompts for spawned agents — a real prompt-injection and file-modification risk. Before installing or running it: 1) review the included scripts (init_workplace.sh, build.sh) and the Rust server source to confirm they do what you expect; 2) back up CLAUDE.md, opencode.jsonc, and any important project files in case the skill overwrites them; 3) inspect any .workplace/agents/*.md files (or any workplace skills pulled from git) before allowing them to run, since their contents become system prompts for subagents; 4) prefer building and running the Rust server yourself rather than running an untrusted prebuilt binary; 5) only install from a trusted source and consider limiting write access (or running in a sandbox) if you must evaluate it in an untrusted environment. If you want, I can point out the exact lines in the scripts and SKILL.md that perform file writes and compose system prompts so you can review them more easily.

Type: OpenClaw Skill Name: multi-workplace Version: 0.4.0 The 'multi-workplace' skill is designed for extensive local system interaction, including broad file system access (reading/writing to `~/.openclaw/workspace/.workplaces/` and project-specific `.workplace/` directories), execution of shell scripts (`scripts/init_workplace.sh`, `scripts/scan_workplaces.sh`), and running a local Rust binary (`workplace-server`). While these high-privilege operations are central to the skill's stated purpose, the reliance on shell scripts and recursive calls introduces a significant attack surface for potential vulnerabilities (e.g., shell injection, path traversal) if user-provided inputs are not perfectly sanitized. No clear evidence of intentional malicious behavior such as data exfiltration, unauthorized network communication, or covert persistence mechanisms was found.