fullstack-workspace-init

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/init-workspace.py script uses subprocess.run to execute a local helper script if it exists at the path ~/.codex/skills/agent-folder-init/scripts/scaffold.py. This is intended to initialize agent-specific documentation folders in the generated project.\n- [COMMAND_EXECUTION]: The skill provides instructions and generated package.json scripts that involve running local development commands such as bun install, bun dev, and bun test.\n- [EXTERNAL_DOWNLOADS]: The generated GitHub Actions workflow (ci.yml) references well-known and trusted external actions for CI/CD, including actions/checkout@v4, oven-sh/setup-bun@v2, and codecov/codecov-action@v4.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 07:34 PM