workspace-init

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard shell commands including pwd and find to discover the existing project structure and identify repository folders during the initialization process.
  • [EXTERNAL_DOWNLOADS]: Provides users with commands to install additional functionality via npx using the package house-of-giants/projectskills. This package is associated with the skill's author and is part of the intended project setup workflow.
  • [SAFE]: Implements proactive security measures by generating .gitignore entries that prevent the accidental commitment of sensitive information, including local environment files and private data exports.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 06:02 PM