The Agent Skills Directory

[SAFE]: The skill performs legitimate workspace management tasks such as discovering local Git repositories and managing submodules. All operations are confined to the local filesystem and standard Git remote interactions.
[SAFE]: The Bash scripts (setup-workspace.sh, workspace.sh) utilize Python 3's json.dumps utility to safely escape directory names and Git metadata before outputting JSON. This prevents malformed output and ensures robust data handling.
[SAFE]: The skill implements security best practices by validating Git remote URL schemes, permitting only https://, git@, and ssh:// during submodule registration to prevent exploitation of dangerous URI schemes.
[SAFE]: The initialization and link modes include guardrails to prevent accidental data loss, such as requiring a clean Git working tree before performing indexing changes.

workspace