workspace-init
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands including
pwdandfindto discover the existing project structure and identify repository folders during the initialization process. - [EXTERNAL_DOWNLOADS]: Provides users with commands to install additional functionality via
npxusing the packagehouse-of-giants/projectskills. This package is associated with the skill's author and is part of the intended project setup workflow. - [SAFE]: Implements proactive security measures by generating
.gitignoreentries that prevent the accidental commitment of sensitive information, including local environment files and private data exports.
Audit Metadata