Issue Station
Sign In
Tools hereToolbox

openclaw - 💡(How to fix) Fix Skills: repeated 'Skipping skill path that resolves outside its configured root' warnings on 2026.3.28 [1 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
openclaw/openclaw#56919•Fetched 2026-04-08 01:46:00
View on GitHub
Comments
0
Participants
1
Timeline
0
Reactions
0
Author
jakobmygindjakobmygind
Participants
jakobmygindjakobmygind

Error Message

  • warning emitted from skillsLogger.warn("Skipping skill path that resolves outside its configured root.", ...)

Root Cause

What was verified

  • commands.nativeSkills is not the right lever; it controls native skill command registration, not core skill loading.
  • Current config has no custom skills section, so this is not caused by local skills.load.extraDirs or skills.allowBundled settings.
  • Local extension plugins checked:
    • .openclaw/extensions/google-bridge
    • .openclaw/extensions/google-calendar-bridge (now removed) Neither declared skill dirs causing this issue.
  • Bundled skills directory exists at:
    • /opt/homebrew/lib/node_modules/openclaw/skills
  • Filesystem spot checks found no obvious symlink escapes in bundled skill dirs.
  • Local OpenClaw docs show skills.allowBundled exists, but it is an allowlist for bundled skill eligibility, not an obvious fix for root containment warnings.
  • openclaw update status showed no newer version available than 2026.3.28.

Fix Action

Fix / Workaround

Suggested next step

If this becomes worth chasing:

  1. capture the structured warning fields (source, rootDir, path, realPath) from gateway logs at trace/debug level or by patching logger output
  2. compare bundled skill discovery roots against realpaths during startup
  3. file upstream bug with exact version (2026.3.28, commit f9b1079)
RAW_BUFFERClick to expand / collapse

OpenClaw 2026.3.28 skill path warning spam

Date: 2026-03-29 Status: open / deferred Severity: low functional impact, high log noise

Symptom

On startup and during skill checks, OpenClaw emits repeated warnings:

[skills] Skipping skill path that resolves outside its configured root.

Observed frequency:

  • 18 warnings per startup / openclaw skills check
  • persists after gateway cleanup and restart
  • no matching WebSocket 500s after other fixes

What was verified

  • commands.nativeSkills is not the right lever; it controls native skill command registration, not core skill loading.
  • Current config has no custom skills section, so this is not caused by local skills.load.extraDirs or skills.allowBundled settings.
  • Local extension plugins checked:
    • .openclaw/extensions/google-bridge
    • .openclaw/extensions/google-calendar-bridge (now removed) Neither declared skill dirs causing this issue.
  • Bundled skills directory exists at:
    • /opt/homebrew/lib/node_modules/openclaw/skills
  • Filesystem spot checks found no obvious symlink escapes in bundled skill dirs.
  • Local OpenClaw docs show skills.allowBundled exists, but it is an allowlist for bundled skill eligibility, not an obvious fix for root containment warnings.
  • openclaw update status showed no newer version available than 2026.3.28.

Best current hypothesis

Likely OpenClaw 2026.3.28 bug/regression or internal bundled-skill path-resolution issue in the skill loader containment check.

Relevant code path observed in installed distribution:

  • resolveContainedSkillPath(...)
  • warning emitted from skillsLogger.warn("Skipping skill path that resolves outside its configured root.", ...)

Installed file inspected:

  • /opt/homebrew/lib/node_modules/openclaw/dist/auth-profiles-B5ypC5S-.js

Operational impact

  • Main impact is log noise / churn.
  • After other fixes, gateway health improved substantially and no new WebSocket 500s were observed.
  • Issue is currently deferred unless a newer OpenClaw release or upstream fix lands.

Suggested next step

If this becomes worth chasing:

  1. capture the structured warning fields (source, rootDir, path, realPath) from gateway logs at trace/debug level or by patching logger output
  2. compare bundled skill discovery roots against realpaths during startup
  3. file upstream bug with exact version (2026.3.28, commit f9b1079)

extent analysis

Fix Plan

The fix involves modifying the resolveContainedSkillPath function to correctly handle skill paths.

  • Update the resolveContainedSkillPath function to use the path.resolve method to get the absolute path of the skill directory.
  • Compare the absolute path with the configured root directory using the path.dirname method.

Example code:

const path = require('path');

function resolveContainedSkillPath(skillPath, rootDir) {
  const absolutePath = path.resolve(skillPath);
  const rootDirPath = path.dirname(rootDir);
  if (absolutePath.startsWith(rootDirPath)) {
    return absolutePath;
  } else {
    skillsLogger.warn("Skipping skill path that resolves outside its configured root.", {
      source: 'resolveContainedSkillPath',
      rootDir: rootDir,
      path: skillPath,
      realPath: absolutePath
    });
    return null;
  }
}

Verification

To verify the fix, run the openclaw skills check command and check the logs for the warning message. If the fix is successful, the warning message should not appear.

Extra Tips

  • Make sure to update the openclaw version to the latest release if available.
  • If the issue persists, file an upstream bug with the exact version and commit hash.
  • Consider adding additional logging to help diagnose similar issues in the future.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…
#model loading#dependency error#configuration error#environment variable#network issue

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

openclaw - 💡(How to fix) Fix Skills: repeated 'Skipping skill path that resolves outside its configured root' warnings on 2026.3.28 [1 participants]