skills/niracler/skill/workspace-init/Gen Agent Trust Hub

workspace-init

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to verify the presence of required tools (git, jq, openspec), manage the cloning of sub-repositories, and execute environment configuration tasks such as creating Python virtual environments and installing Node.js dependencies.\n- [EXTERNAL_DOWNLOADS]: The skill interacts with GitHub to fetch template metadata and files for updates (niracler/dev-config-template) and performs git clone operations on repositories provided by the user.\n- [REMOTE_CODE_EXECUTION]: The skill automates the execution of setup scripts (./script/setup) from the template and uses standard package managers (pip, npm, bun) which can execute arbitrary code during the installation of project dependencies. These activities are necessary for the skill's core functionality of workspace initialization.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 11:59 AM