fullstack-workspace-init
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/init-workspace.pyscript usessubprocess.runto execute a local helper script if it exists at the path~/.codex/skills/agent-folder-init/scripts/scaffold.py. This is intended to initialize agent-specific documentation folders in the generated project.\n- [COMMAND_EXECUTION]: The skill provides instructions and generatedpackage.jsonscripts that involve running local development commands such asbun install,bun dev, andbun test.\n- [EXTERNAL_DOWNLOADS]: The generated GitHub Actions workflow (ci.yml) references well-known and trusted external actions for CI/CD, includingactions/checkout@v4,oven-sh/setup-bun@v2, andcodecov/codecov-action@v4.
Audit Metadata