workshop
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Local Command Execution: The skill is designed to manage a workshop environment by executing local development commands, including
npm run dev,npm test,npm run typecheck, andnpm run seed. These commands are standard for JavaScript development and are used here to verify the participant's progress. - Project File Modification: As part of its coaching role, the skill modifies source code files within the project directory (e.g.,
src/lib/orchestrator.ts) to implement workshop tasks. It also maintains a.workshop-progress.jsonfile to track the user's journey through the modules. - Credential Awareness and Safety: The skill performs status checks on the
.env.localfile to confirm that necessary API keys are present. Notably, it includes a strict instruction to the agent never to print or reveal these credentials, which is a key security safeguard against accidental data exposure. - Local Network Interaction: The skill interacts with a local API endpoint at
http://localhost:3100/api/desk/status. This is used to synchronize the agent's coaching with the state of the local development server.
Audit Metadata