Workspace Trash

Soft-delete protection for workspace files. Intercept file deletions and move them to a recoverable trash instead of permanent removal. Use when deleting, re...

This skill appears to do what it claims, but check these before installing or using it: - Verify OPENCLAW_HOME / OPENCLAW_WORKSPACE values: ensure they point to the intended OpenClaw directory (not / or your home directory) so the script cannot operate on unintended files. - Confirm behavior around 'empty': the SKILL.md requires user confirmation before permanent deletion, but the script itself does not prompt. Make sure the agent asks you (or modify the script to require an explicit --confirm/--force flag) before running the empty action. - Ensure Node.js and the listed POSIX utilities exist in the runtime environment. - Test move/restore on non-critical files first to confirm permissions and cross-filesystem behavior. - If you need stronger safety, consider adding an interactive confirmation in the script for 'empty' and/or an allowlist check for specific workspace subpaths, and be aware of TOCTOU race conditions with mv/cp+rm fallbacks.

Type: OpenClaw Skill Name: workspace-trash Version: 1.2.0 The workspace-trash skill is a safety utility designed to prevent accidental file loss by implementing a recoverable trash system. The implementation in trash.sh and SKILL.md demonstrates high security awareness, employing symlink resolution to prevent path traversal and using environment variables to pass data to Node.js scripts, which effectively mitigates shell injection risks. The operations are strictly scoped to the ~/.openclaw directory, and no suspicious network activity, data exfiltration, or obfuscation was found.