magic-workspace-init
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto execute package installation commands (pip install,uv pip install,conda install). This is the primary function of the skill and is used to set up the local development environment. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of several well-known Python packages from official registries (e.g., pandas, numpy, scipy, matplotlib, seaborn, pyarrow) and the vendor's own package (data-designer). This behavior is documented and central to the skill's utility.
- [CREDENTIALS_SAFE]: The skill includes procedures to check for the presence of API keys (
GOOGLE_API_KEY,OPENAI_API_KEY,ANTHROPIC_API_KEY) in the environment. It provides guidance for users to set these keys manually and does not contain logic to exfiltrate or hardcode credentials.
Audit Metadata