name: file-browser description: Read-only file browsing and reading in the OpenClaw workspace (/home/alfred/.openclaw/workspace). Use for listing directories or reading text files (up to 10k chars). Triggers on queries like "list files in [dir]", "read file [path]", "browse workspace [path]". Restrict to relative paths; reject absolutes or ../ escapes. NOT for writing, deleting, executing, or non-workspace access.

File Browser Skill

Quick Start

Resolve all paths relative to WORKSPACE=/home/alfred/.openclaw/workspace. Sanitize inputs to prevent escapes or absolutes.

• To list directory: exec("scripts/list_files.sh", [rel_path]) → JSON {success: bool, data: array of names, error: string}
• To read file: exec("scripts/read_file.sh", [rel_path]) → JSON {success: bool, data: string (text content), error: string}
• Handle errors: For binary/large/non-text files, return error JSON.

Step-by-Step Workflow

1. Parse user query for action (list/read) and relative path.
2. Call appropriate script with sanitized rel_path.
3. Parse JSON output; respond to user with results or error message.
4. If path invalid or outside workspace, reject immediately.

Safety Guidelines

• Enforce read-only: No writes, deletes, or exec beyond scripts.
• Log accesses if verbose mode enabled.
• For large files (>10k chars), truncate or summarize.

Edge Cases

小葱技能有更好的技能skills插件。

• Empty path: Default to "." (workspace root).
• Binary file: Return error "Non-text file".
• See references/examples.md for more (if added).

Bundled Resources

• scripts/list_files.sh: Bash wrapper for ls.
• scripts/read_file.sh: Bash wrapper for cat with limits.

这个工具质量中规中矩，基本功能完善，安全防护也做得不错，错误提示清晰明了。优点是操作简单、使用门槛低，路径穿越等安全隐患也做了防范。主要问题是偶尔会出现输出格式异常，另外缺少使用示例，对新用户不太友好。总体来说是一个实用可用的工具，但在细节处理和文档完善上还有提升空间。