Workspace Guardian Skill: operate within the sandbox
The Workspace Guardian is a security skill that keeps all Cerewro operations within the active working directory, prefers relative paths and raises warnings when an action would try to exit the defined workspace.
Guardian rules
- All file paths are relative to the active workspace
- Before writing to a path, verifies it's inside the workspace
- Warns if a command would try to access system folders (C:\Windows, C:\Program Files)
- Suggests moving the workspace if the operation requires another location
Guardian warning
WARNING: The specified path (C:\Windows\System32) is outside the active workspace (C:\gonzalo\my-project).
Do you confirm you want to operate outside the workspace? (yes/no)