workshop

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Local Command Execution: The skill is designed to manage a workshop environment by executing local development commands, including npm run dev, npm test, npm run typecheck, and npm run seed. These commands are standard for JavaScript development and are used here to verify the participant's progress.
  • Project File Modification: As part of its coaching role, the skill modifies source code files within the project directory (e.g., src/lib/orchestrator.ts) to implement workshop tasks. It also maintains a .workshop-progress.json file to track the user's journey through the modules.
  • Credential Awareness and Safety: The skill performs status checks on the .env.local file to confirm that necessary API keys are present. Notably, it includes a strict instruction to the agent never to print or reveal these credentials, which is a key security safeguard against accidental data exposure.
  • Local Network Interaction: The skill interacts with a local API endpoint at http://localhost:3100/api/desk/status. This is used to synchronize the agent's coaching with the state of the local development server.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 09:26 PM
Security Audit — agent-trust-hub — workshop