Workspace Audit

Audit your OpenClaw workspace for drift — stale paths, duplicate content, oversized files, secret leaks, and 1Password vault mismatches. Zero deps. By The Ag...

This skill appears to do what it says — scan your local OpenClaw workspace for drift and optionally compare TOOLS.md to your 1Password vault. Before running it: - Review the scripts locally (they're included) and run them interactively first so you can inspect outputs. - Ensure bash and python3 are available; the 1Password check requires the official op CLI and valid authentication (OP_SERVICE_ACCOUNT_TOKEN or op signin) if you want that audit. - Be aware outputs (vault item titles, matching/missing filenames, and detected 'possible secrets') are printed to stdout and could end up in logs, cron emails, or monitoring systems — avoid running in environments where logs are exposed to untrusted parties. - If you schedule it (cron/agent automation), restrict the execution environment and do not expose OP tokens or other secrets to shared runners. Review audit.conf to tune size limits. - If you need stricter privacy, skip the 1Password audit or run the scripts with op disconnected so network calls to 1Password are avoided.

Type: OpenClaw Skill Name: workspace-audit Version: 1.1.0 The workspace-audit skill is a legitimate utility designed to maintain the integrity of an OpenClaw workspace by checking for broken paths, duplicate content, and file size limits. It includes security-enhancing features such as scanning for leaked secrets in memory files (audit-structure.sh) and ensuring credentials are confined to specific files (audit-duplication.sh). While it interacts with the 1Password CLI (audit-1password.sh), it does so locally to verify documentation alignment and shows no evidence of data exfiltration or malicious intent.