create-workspace
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones git repositories from user-provided or resolved URLs.
- The
git clonecommand is used inSKILL.mdto fetch primary repositories and dependencies into structured directories. - GitHub shorthands are resolved to full HTTPS URLs using the
ghCLI or GitHub MCP tools. - [COMMAND_EXECUTION]: Executes several system and git commands to scaffold the workspace.
- Uses
mkdirto create the project directory structure (repositories, docs, deps, tasks, sketch). - Uses
git worktreeto manage independent working trees for parallel development across multiple repositories. - Utilizes the
ghCLI to query repository metadata when shorthands are provided. - Generates a
.claude/settings.jsonfile that defines a sandbox for future agent commands, explicitly blocking high-risk operations likesudo,rm -rf, and access to sensitive files like~/.sshor.env.
Audit Metadata