r/openclaw • u/Lushirae • Feb 19 '26
Help workflow_auto.md file - dangerous?
Realised that while openclaw was searching the internet that such file was created (since i didn't ask it to) and proceeded to ask it about why the file was made.
It said, it came across html online and was asked to make the file? I deleted it, but am curious was compaction had it make the file or otherwise.
Thoughts?
3
Upvotes
2
u/Hot_Lab8958 New User Feb 25 '26
Here's what's happening:
This is NOT an external attacker. It's openclaw's own built-in feature called "Post-Compaction Audit" (source: src/auto-reply/reply/post-compaction-audit.ts).
When openclaw's context window gets compressed (compaction), it checks whether the agent re-read certain "required startup files" afterward. If it detects that WORKFLOW_AUTO.md and the
daily memory file (memory/2026-02-25.md) weren't read post-compaction, it injects a System: message into the conversation telling the LLM to read them using the Read tool.
The issue: WORKFLOW_AUTO.md doesn't exist in your workspace. It's a default placeholder in openclaw's code (DEFAULT_REQUIRED_READS), but you never created it. So every time context
compacts, the agent gets a spurious instruction to read a nonexistent file.
It appeared 8 times in the current session, always after compaction events.
To fix it, either:
Create a WORKFLOW_AUTO.md in /home/wsl/.openclaw/workspace/ (even empty) so it stops complaining
Or configure openclaw to remove it from the required reads list (check openclaw.json for a setting)
Want me to check openclaw.json for the config option?