Nightly Workspace Audit

Nightly workspace audit — auto-discover file dependencies by scanning all workspace files for cross-references, manage HOT/WARM/COLD memory tiers, detect orp...

This skill appears to do what it says (scan and clean an OpenClaw workspace) and does not request network credentials or external installs, which is good — but it will autonomously modify and delete workspace files based on heuristic rules. Before installing or running it: 1) insist on a dry-run mode that reports proposed changes without applying them; 2) require explicit user confirmation for any deletions/renames/moves; 3) back up your workspace first; 4) verify how it accesses session transcripts and cron jobs (ensure it only reads data you expect it to); and 5) clarify the local-overrides file path and keep a protected list of files the skill must never auto-modify.

Type: OpenClaw Skill Name: nightly-workspace-audit Version: 1.0.0 The skill implements a workspace maintenance routine with broad permissions to read, move, and delete files across the environment (SKILL.md). It is classified as suspicious because it includes destructive actions like 'pruning' content and an indirect prompt injection risk where the agent is instructed to 'run additional checks' from a user-provided 'local-overrides.md' file. Additionally, it accesses sensitive session transcripts and cron job configurations to determine file usage (references/tier-rules.md), which are high-risk behaviors even if plausibly needed for the stated purpose.