← 返回 Skills 市场
484
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install workspace-project-standard
功能描述
Project workspace setup and documentation standard for OpenClaw agents. Enforces a three-layer documentation system and self-contained project structure. Tri...
安全使用建议
This skill is a documentation/workspace policy and appears coherent, but it instructs agents to edit global workspace files and to reference credentials. Before installing: (1) review and trust any scripts it will run (scripts/new-project.ps1) — the skill will run that if present; (2) back up AGENTS.md, MEMORY.md, and CREDENTIALS.md and confirm they do not contain raw secrets you don't want agents to modify; (3) restrict the agent's file-write permissions to only the intended workspace directories if possible; (4) enforce a policy that credentials are stored only in secure secret stores (not in plain CREDENTIALS.md or LINKS.md); and (5) test the scaffold flow in an isolated environment first. If you need help checking scripts/new-project.ps1 or locking down CREDENTIALS.md handling, review those files before enabling autonomous runs.
功能分析
Type: OpenClaw Skill
Name: workspace-project-standard
Version: 1.0.1
The skill is suspicious due to instructions that introduce significant vulnerabilities. It instructs the AI agent to execute a PowerShell script (`scripts/new-project.ps1`) and to directly modify its own configuration files (`AGENTS.md`, `MEMORY.md`) by adding user-provided project names. This creates a high risk of prompt injection, where an attacker could potentially inject malicious commands or paths into the agent's memory or whitelist, leading to unauthorized file system access or altered agent behavior, especially if the `<project-name>` input is not properly sanitized.
能力评估
Purpose & Capability
Name and description (project workspace & documentation standard) match the SKILL.md content: templates, directory rules, and update triggers all align with a documentation/workspace policy. The skill requests no binaries, env vars, or installs, which is proportionate for a purely procedural standard.
Instruction Scope
The runtime instructions tell the agent to run a scaffold script (scripts/new-project.ps1) and to create/move/modify files in the workspace root (AGENTS.md, MEMORY.md, CREDENTIALS.md, projects/*). Editing global workspace files and maintaining credential references are within scope for a workspace standard but expand the agent's write scope to system-level documents — this is notable because it can affect other workflows and may surface or restructure sensitive information.
Install Mechanism
No install spec and no code files beyond templates; nothing is written to disk by an installer. This is the lowest-risk install footprint (instruction-only).
Credentials
The skill declares no required environment variables or credentials, which is appropriate. However, templates and LINKs.md explicitly reference a CREDENTIALS.md and suggest '凭据引用' (credential references). The skill does not request secrets itself but instructs agents to document and reference credentials — review how your environment stores/limits access to CREDENTIALS.md and avoid putting raw secrets into documentation files.
Persistence & Privilege
always is false (good) and autonomous invocation is allowed (normal). The main persistence/privilege concern is that the instructions modify shared workspace root files (AGENTS.md, MEMORY.md, CREDENTIALS.md) and enforce moving files between root and project directories; this grants the skill effective write influence over global workspace state and should be constrained by agent permissions and review policies.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install workspace-project-standard - 安装完成后，直接呼叫该 Skill 的名称或使用
/workspace-project-standard触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Fix skill.json metadata
v1.0.0
- Initial release of workspace-project-standard skill.
- Enforces a strict, self-contained project structure for OpenClaw agents.
- Introduces a three-layer documentation system: workspace summary, project master doc, and links/paths index.
- Standardizes new project setup, workspace cleanup, and documentation creation workflows.
- Defines clear directory rules to prevent temp files from polluting the workspace root.
- Provides templates and update triggers to ensure documentation stays current alongside code.
元数据
常见问题
Workspace Project Standard 是什么？
Project workspace setup and documentation standard for OpenClaw agents. Enforces a three-layer documentation system and self-contained project structure. Tri... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 484 次。
如何安装 Workspace Project Standard？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install workspace-project-standard」即可一键安装，无需额外配置。
Workspace Project Standard 是免费的吗？
是的，Workspace Project Standard 完全免费（开源免费），可自由下载、安装和使用。
Workspace Project Standard 支持哪些平台？
Workspace Project Standard 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Workspace Project Standard？
由 lnshyo（@lnshyo）开发并维护，当前版本 v1.0.1。
推荐 Skills