Openclaw Spacesuit

A comprehensive OpenClaw workspace framework providing session protocols, memory system, git workflow, safety rules, priority triage, communication handoffs,...

What to consider before installing: - Review and run in a safe test workspace first: clone the repo into a throwaway workspace and run ./scripts/diff.sh and ./scripts/upgrade.sh --dry-run before applying anything to a production workspace. - Inspect templates and scripts yourself (install.sh, upgrade.sh, sync-operators.sh). The package will copy files and scripts into your workspace root and create directories (memory/, handoff/, decisions/, scripts/, state/). - Pay special attention to instructions that tell agents to search ~/.config, dotfiles, .envrc, and cloud session folders. Those are common places for secrets. If you do not want automatic scanning of those locations, avoid running sync scripts or modify them to limit paths (or set OPENCLAW_SESSIONS_DIR explicitly and run with --dry-run). - Note contradictory guidance: AGENTS.md contains both a strict SECURITY.md and a line 'Don't ask permission. Just do it.' Decide which behavior you want agents to follow; consider editing AGENTS.md/SOUL.md to enforce explicit consent before any external or cross-home actions. - The pre-scan "injection" patterns are present in SECURITY.md as defensive examples; they are not an active attack but demonstrate the project trains agents to refuse such prompts. - Practical steps: run sync-operators.sh with --dry-run; set restrictive file permissions on workspace; ensure you control OPENCLAW_PROFILE/OPENCLAW_SESSIONS_DIR before running; search the templates for any accidental secret values before upgrade/install. Confidence: medium — the package is internally consistent as a scaffold, but several explicit instructions expand its read-scope to home/cloud credential locations and include strong autonomy language that may be surprising; that makes the risk profile ambiguous and worth manual review before use.

Type: OpenClaw Skill Name: spacesuit Version: 0.3.0 The skill bundle is largely benign, providing a security-focused framework for OpenClaw agents, including robust prompt injection defenses and explicit rules against secret exfiltration in `base/SECURITY.md` and `base/AGENTS.md`. However, the `scripts/sync-operators.sh` file is classified as suspicious because it accesses potentially sensitive local data by reading OpenClaw session transcripts from `~/.openclaw-<profile>/agents/main/sessions`. While its stated purpose is to generate `state/operators.json` for internal dashboards by extracting only user IDs, usernames, and message counts, the capability to read raw session data from a user's home directory is a high-risk operation, even if processed locally without external exfiltration.