Fähigkeiten webask-workspace-access

📦

webask-workspace-access

Name: webask-workspace-access
Author: webaskio

Inhaltsrevision r1 Sicher 📁 Dateisystemzugriff⚙️ Externe Befehle

Manage WebAsk Workspace Access

Missing folder permissions and unaccepted invitations can prevent colleagues from seeing surveys. This skill guides WebAsk MCP tools to inspect access and apply task-specific permissions.

Unterstützt: Claude Codex Code(CC)

🥉 77 Bronze

Maintain this Skill? Claim it 🥉 77 Bronze

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "webask-workspace-access" from https://skillstore.io/skills/webaskio-webask-workspace-access.md and its manifest at https://skillstore.io/api/skills/webaskio-webask-workspace-access/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/webaskio-webask-workspace-access.md Signiertes manifest GET /api/skills/webaskio-webask-workspace-access/manifest Signiertes lockfile GET /api/skills/webaskio-webask-workspace-access/lockfile

Testen

„webask-workspace-access“ wird verwendet. In this example, a colleague has an Analyst role but no assigned folders. Why is the survey list empty?

Erwartetes Ergebnis:

The role does not provide access to the needed folders. Grant only the relevant folder access after confirming the colleague's task.

„webask-workspace-access“ wird verwendet. In this example, an invited colleague appears in the member list but has not accepted the invitation.

Erwartetes Ergebnis:

The pending invitation does not provide access yet. The colleague must accept it; the invitation can be resent when requested.

„webask-workspace-access“ wird verwendet. A colleague has full access but only needs to view results. What should I review?

Erwartetes Ergebnis:

Check the current role and folder access.
Select a role without editing privileges and retain only the required folders.
Do not remove the member unless explicitly requested.

Sicherheitsaudit

Sicher

v1 • 29.9.2026 Versionsbericht öffnen

All 13 static findings are false positives: one documentation navigation link and twelve Markdown references to MCP tools. No evidence found of prompt injection, unauthorized data transfer, or shell execution in the reviewed files. The skill guides legitimate permission changes and includes safeguards against excessive privileges, unsolicited member removal, and deleting assigned roles.

Gescannte Dateien

190

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Risikofaktoren

📁 Dateisystemzugriff (1)

README.md:1

⚙️ Externe Befehle (12)

SKILL.md:15 SKILL.md:16 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:35

Das letzte abgeschlossene statische und semantische Audit erkannte keine bestätigten Sicherheitsbefunde. Dies beweist nicht, dass der Skill keine Nebenwirkungen hat.

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/webaskio-webask-workspace-access/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/webaskio-webask-workspace-access/security.svg)](https://skillstore.io/skills/webaskio-webask-workspace-access?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/webaskio-webask-workspace-access?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/webaskio-webask-workspace-access/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/webaskio-webask-workspace-access.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

webaskio. (2026). webask-workspace-access security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/webaskio-webask-workspace-access/audits/1

BibTeX-Zitat

@techreport{webaskio-webaskio-webask-workspace-access-2026,
  author = {webaskio},
  title = {webask-workspace-access security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/webaskio-webask-workspace-access/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "webask-workspace-access security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "webaskio"
date-released: "2026-09-29"
url: "https://skillstore.io/skills/webaskio-webask-workspace-access/audits/1"
identifiers:
  - type: other
    value: "skillstore:webaskio-webask-workspace-access:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Onboard a colleague

Invite a colleague and select the role and folders required for their work after inspecting existing access.

Diagnose missing surveys

Check invitation acceptance, assigned roles, and folder permissions when a colleague cannot see expected surveys.

Review excessive permissions

Compare member permissions with job tasks and identify where results-only access would be sufficient.

Diese Prompts ausprobieren

List current access

Show members and roles in [workspace]. Do not change any permissions.

Investigate missing surveys

Check why [member] cannot see surveys in [folder] within [workspace]. Inspect invitation status and permissions, then explain the cause without making changes.

Invite with limited access

Inspect roles in [workspace], then propose results-only access to [folder] for [email]. Ask me to confirm the role and folder before sending the invitation.

Plan a permission review

Review roles and folder access in [workspace] against [team responsibilities]. Propose minimal permissions and identify assigned roles before suggesting deletion. Make no changes without confirmation.

Bewährte Praktiken

Inspect the selected workspace, member access, and roles before proposing changes.
Choose permissions from the member's actual tasks and grant only the required folders.
Confirm consequential changes and check role assignments before deleting any role.

Vermeiden

Granting full access merely to make a missing survey visible.
Removing a member without an explicit request.
Deleting a role before checking which members use it.

Häufig gestellte Fragen

What must be configured before using this skill?

The assistant needs access to the listed WebAsk MCP tools and an account authorized for the requested operations.

Why does an invited member still lack access?

The member must accept the invitation. Appearing in the member list alone does not mean access is active.

Why can a member have a role but see no surveys?

The required folders may be inaccessible. A restriction to personally created surveys can also limit visibility.

Can this skill change roles and folder permissions?

It guides the corresponding WebAsk MCP tools, subject to account authorization. It recommends inspecting existing access and granting only needed permissions.

Can a removed member simply be restored?

The skill states that a removed member must receive a new invitation. It prohibits removal without an explicit request.

What happens when an account limit prevents an action?

The skill instructs the assistant to explain the limit and stop, without recommending a plan change or directing the user to payment.