Workspace Trash

核心功能：替代rm命令，拦截工作区文件删除请求移至可恢复回收站，支持查看、清空、恢复操作，仅处理指定目录文件并含安全校验。典型场景：工作区删除/清理文件时，避免误删导致数据永久丢失。输入为slash命令（如/trash:view）或脚本调用，输出为文件列表、操作确认提示、执行结果反馈，清空前需用户确认。

crewhaus

热度 53.83

最近更新 2026-05-11 17:32:38

分类：自动化依赖：代码执行 / 读写文件应用场景：自动化脚本 / 工作流

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add workspace-trash

Metadata

name: workspace-trash
description: Soft-delete protection for workspace files. Intercept file deletions and move them to a recoverable trash instead of permanent removal. Use when deleting, removing, or cleaning up files in the workspace. Triggers on /trash, /trash:view, /trash:empty, /trash:restore, or any file deletion request. Also use when the agent needs to rm/delete/remove any file — always trash instead of permanently deleting.
requiredBinaries: ["node","mv","cp","rm","find","awk","date","basename","dirname"]

Workspace Trash

Never permanently delete workspace files. Always use trash instead of rm.

Dependencies

Node.js (node) — required for manifest (JSON) management
POSIX utilities — mv, cp, rm, find, awk, date, basename, dirname

Configuration

Variable	Default	Description
`OPENCLAW_HOME`	`$HOME/.openclaw`	OpenClaw root directory. Only files under this path can be trashed.
`OPENCLAW_WORKSPACE`	`$OPENCLAW_HOME/workspace`	Primary workspace directory. Trash lives at `$OPENCLAW_WORKSPACE/.trash/`.

These variables are standard OpenClaw environment variables and are typically already set. The script uses safe defaults if unset.

Slash Commands

/trash — Show trash menu (view, empty, restore options)
/trash:view — List all items in trash
/trash:empty — Permanently delete all trash contents (confirm first!)
/trash:restore — List items and ask which to restore

Script

bash skills/workspace-trash/scripts/trash.sh <action> [args...]

Actions: move, list, restore <id|index>, empty, size

Security

Scope lock: Only files under $OPENCLAW_HOME (default ~/.openclaw/) can be trashed. Paths outside this boundary are refused.
Symlink resolution: All paths are resolved to their real location before the scope check, preventing symlink traversal attacks.
No shell interpolation of user data: All user-provided paths and filenames are passed to Node.js via environment variables (process.env), never via string interpolation into node -e scripts. This prevents code injection via crafted filenames.
-- separators: All mv, cp, and rm calls use -- to prevent filenames starting with - from being interpreted as flags.

Destructive Operations

empty action: Uses rm -rf to permanently delete all trash contents. This is irreversible. The agent must always confirm with the user and show what will be deleted before running this action.
Cross-filesystem fallback: When mv fails across filesystem boundaries, the script falls back to cp -a + rm -rf. The source is only deleted after a successful copy.

Rules

NEVER use rm or rm -rf on OpenClaw files. Always use the trash script's move action instead.
When asked to delete/remove/clean up files, use trash.sh move <path> — not rm.
Before emptying trash, always confirm with the user and show what will be deleted.
The trash lives at .trash/ in the primary workspace root. A .manifest.json tracks original paths for restoration.
Scope: any file under ~/.openclaw/ — primary workspace, agent workspaces (workspace-*), and other OpenClaw directories. The script refuses paths outside ~/.openclaw/.
Cross-filesystem support: Agent workspaces may be on different mounts. The script uses cp -a + rm as a fallback when mv fails across filesystems. Restore also handles cross-filesystem moves.
Restore by index number (from list) or by trash name. Items from agent workspaces show [agent] tag in list view.
When multiple files are being deleted, pass them all in one command: trash.sh move file1 file2 dir1