Install
$ agentstack add skill-sounder25-foundational-agent-skills-00-workspace-forensics ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
SKILL-000: Workspace Forensics Audit
Overview
Foundation skill that generates a complete workspace profile including git signals, build configurations, language detection, and forensics completeness tracking. All other skills should consume WORKSPACE_PROFILE.json or refuse to run without it.
Trigger Phrases
audit workspacegenerate workspace profileforensics auditworkspace scan
Inputs
| Parameter | Type | Required | Default | Description | |-----------|------|----------|---------|-------------| | --workspace-path | string | No | Current directory | Path to workspace to audit | | --output-format | string | No | json | Output format: json, md, or both | | --output-dir | string | No | ./.forensics | Directory to save outputs | | --verbose | flag | No | false | Show detailed progress |
Outputs
1. WORKSPACE_PROFILE.json
Complete workspace metadata in machine-readable format:
{
"workspace_name": "Scrutor",
"absolute_path": "C:\\projects\\Scrutor",
"audit_timestamp": "2026-01-15T20:55:00-06:00",
"forensics_completeness": "full",
"evidence_type": "repo_artifact",
"collection_errors": [],
"repo_type": "git",
"git_signals": {
"current_branch": "main",
"status_clean": false,
"changed_files_count": 642,
"last_commit": {
"hash": "8b693f4",
"date": "2026-01-08T19:00:36-06:00",
"message": "Cleanup lock naming, fix build warnings"
},
"commits_last_30_days": 15
},
"languages": ["C#/.NET"],
"build_signals": {
"solution_file": "Scrutor.sln",
"project_files": ["Scrutor.Core.csproj", "Scrutor.RPC.csproj", "..."],
"build_command": "dotnet build",
"test_command": "dotnet test"
},
"intent_breadcrumbs": {
"NEXT.md": {"exists": true, "last_modified": "2026-01-08"},
"PLAN.md": {"exists": false},
"STATE.json": {"exists": false}
},
"markers": {
"TODO": 12,
"FIXME": 3,
"HACK": 1
}
}
2. FORENSICS_SUMMARY.md
Human-readable summary with recommendations.
Preconditions
- Workspace path exists and is accessible
- PowerShell 5.1+ or PowerShell Core 7+
- Git installed (if analyzing git repo)
Safety/QA Checks
- Path Validation - Verify workspace path exists, check permissions
- Git Safety - Only read operations, handle missing .git gracefully
- File System Safety - Respect .gitignore, skip binaries, limit recursion
Stop Conditions
| Condition | Action | |-----------|--------| | Workspace path not found | HALT - Ask user for correct path | | Permission denied | HALT - Ask user to grant access | | Git command timeout | WARN - Mark git_signals as partial |
Implementation
See audit_workspace.ps1 in this directory.
Integration with Other Skills
All other skills should:
- Check for
WORKSPACE_PROFILE.json - If not found, run SKILL-000 first
- Consume profile data instead of re-discovering facts
- Verify
forensics_completeness: fullbefore proceeding
References
- Evidence collection:
workspace_forensics_2026-01-15/collect_evidence.ps1 - Analysis:
workspace_forensics_2026-01-15/analyze_evidence.ps1 - QA fixes:
workspace_forensics_2026-01-15/QA_FIXES_APPLIED.md
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Sounder25
- Source: Sounder25/Foundational-Agent-Skills
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.