openclaw - 💡(How to fix) Fix [Bug]: Update 2026.4.1 silently sandboxes all skills — breaks 35+ skills with no migration path [1 participants]

Summary

After updating to 2026.4.1, all agent skills are silently moved into a sandbox directory (~/.openclaw/sandboxes/agent-<id>/skills/). Any skill that calls an external binary (Bear, Go, memo CLI, spotify, etc.) now fails with "missing dependencies" because the sandbox does not have access to host binaries. There is no warning, no migration guide, and no way to opt out.

Impact

35+ skills broken simultaneously. Prior to update all skills worked correctly on the host. After update, the sandbox intercepts skill execution and cannot find binaries that exist on the host system.

Affected skills (partial list)

apple-notes, bear-notes, blogwatcher, blucli, bluebubbles, camsnap, eightctl, himalaya, imsg, mcporter, nano-banana-pro, nano-pdf, openhue, oracle, ordercli, sherpa-onnx-tts, songsee, sonoscli, spotify-player, things-mac, wacli, voice-call, and more.

Combined damage from 2026.4.1

This update has caused a complete loss of functionality for an entire working day:

• Sandbox auto-enabled for all agents via agents.defaults.sandbox.mode = "all" (#58885)
• Exec approval popups cannot be disabled (#58881, #59003, #59006, #59010)
• TUI input vanishes silently (#59014)
• NO_REPLY from models (#59008)
• All 35+ skills broken by sandbox isolation (this issue)
• 14 cron jobs failing

This is not acceptable. A single update should not be able to destroy an entire working setup with no rollback path. The sandbox feature needs an explicit opt-in, not opt-out.

Request

• Sandbox must be opt-in, never opt-out
• Skills must continue to work with host binaries unless sandbox is explicitly configured
• openclaw doctor must detect and report sandbox-broken skills
• Ship a migration guide before any update that changes security defaults