workspace-os-setup
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local Bash (
scaffold-workspace-os.sh) and PowerShell (scaffold-workspace-os.ps1) scripts to automate the scaffolding of the workspace environment. These scripts perform directory creation and token replacement in Markdown templates using provided business metadata. The operations are local to the target path and are part of the skill's core functionality. - [PROMPT_INJECTION]: As the skill is designed to ingest and organize external content (such as meeting notes, emails, and business documents), it possesses an inherent surface for indirect prompt injection. The skill mitigates this by instructing agents to preserve raw input in isolated
raw/directories and to separate processed artifacts from source data. - [EXTERNAL_DOWNLOADS]: Documentation within the skill references the
skill-creatortool from a trusted organization's public repository. These references are used for optional functionality and involve well-known technology entities.
Audit Metadata