Workspace Audit

Your workspace files drift. Credentials go stale. Paths break. Secrets leak into memory files. This skill catches it all.

Zero dependencies. Bash + Python stdlib. Works on macOS and Linux.

What It Checks

Quick Start

Run all audits:
CODEBLOCK0

Verbose mode (shows passing checks too):
CODEBLOCK1

Individual Audits

CODEBLOCK2

Configuration

All scripts respect environment variables — no hardcoded paths or values.

Custom File Size Limits

Create audit.conf in the skill directory to override defaults:

CODEBLOCK3

When to Run

• - After editing TOOLS.md, AGENTS.md, or MEMORY.md
• After adding/removing 1Password items
• After moving or renaming skills/scripts/docs
• During weekly review or nightly consolidation cron
• After installing new skills

File Role Reference

See references/file-roles.md for the single-responsibility matrix — which content belongs in which file.

Exit Codes

FAQ

What is workspace-audit?
A zero-dependency audit suite for OpenClaw workspaces. It checks your workspace files (AGENTS.md, TOOLS.md, MEMORY.md, etc.) for drift — broken paths, duplicate content, oversized files, leaked secrets, and 1Password vault mismatches. Runs entirely in bash + Python stdlib.

What problem does it solve?
OpenClaw workspaces drift over time. You rename a script but forget to update TOOLS.md. You add a 1Password item but never document it. A secret leaks into a memory file. A skill folder is missing its SKILL.md frontmatter. This skill catches all of it in one command.

What are the requirements?
Bash and Python 3 (stdlib only). No pip installs needed. 1Password CLI (op) is optional — the vault audit gracefully skips if op isn't installed or authenticated.

Does it work without 1Password?
Yes. The 1Password audit is one of four checks. If op isn't installed or OP_SERVICE_ACCOUNT_TOKEN isn't set, it skips that audit and runs the other three (structure, duplication, paths).

Can I customize the file size limits?
Yes. Create an audit.conf file in the skill directory with variables like MEMORY_LIMIT=200 or AGENTS_LIMIT=500. See audit.conf.example for all options.

How do I run it on a schedule?
Add a cron job that calls bash skills/workspace-audit/scripts/audit-all.sh. It returns exit code 1 if issues are found, so your agent can alert you only when something drifts.