Compétences webask-workspace-access

📦

webask-workspace-access

Name: webask-workspace-access
Author: webaskio

Révision du contenu r1 Sûr 📁 Accès au système de fichiers⚙️ Commandes externes

Manage WebAsk Workspace Access

Missing folder permissions and unaccepted invitations can prevent colleagues from seeing surveys. This skill guides WebAsk MCP tools to inspect access and apply task-specific permissions.

Prend en charge: Claude Codex Code(CC)

🥉 77 Bronze

Maintain this Skill? Claim it 🥉 77 Bronze

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "webask-workspace-access" from https://skillstore.io/skills/webaskio-webask-workspace-access.md and its manifest at https://skillstore.io/api/skills/webaskio-webask-workspace-access/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/webaskio-webask-workspace-access.md manifest signé GET /api/skills/webaskio-webask-workspace-access/manifest lockfile signé GET /api/skills/webaskio-webask-workspace-access/lockfile

Tester

Utilisation de « webask-workspace-access ». In this example, a colleague has an Analyst role but no assigned folders. Why is the survey list empty?

Résultat attendu:

The role does not provide access to the needed folders. Grant only the relevant folder access after confirming the colleague's task.

Utilisation de « webask-workspace-access ». In this example, an invited colleague appears in the member list but has not accepted the invitation.

Résultat attendu:

The pending invitation does not provide access yet. The colleague must accept it; the invitation can be resent when requested.

Utilisation de « webask-workspace-access ». A colleague has full access but only needs to view results. What should I review?

Résultat attendu:

Check the current role and folder access.
Select a role without editing privileges and retain only the required folders.
Do not remove the member unless explicitly requested.

Audit de sécurité

Sûr

v1 • 29/09/2026 Ouvrir le rapport versionné

All 13 static findings are false positives: one documentation navigation link and twelve Markdown references to MCP tools. No evidence found of prompt injection, unauthorized data transfer, or shell execution in the reviewed files. The skill guides legitimate permission changes and includes safeguards against excessive privileges, unsolicited member removal, and deleting assigned roles.

Fichiers analysés

190

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Facteurs de risque

📁 Accès au système de fichiers (1)

README.md:1

⚙️ Commandes externes (12)

SKILL.md:15 SKILL.md:16 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:35

Le dernier audit statique et sémantique terminé n’a détecté aucun constat de sécurité confirmé. Cela ne prouve pas que le skill est sans effets secondaires.

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/webaskio-webask-workspace-access/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/webaskio-webask-workspace-access/security.svg)](https://skillstore.io/skills/webaskio-webask-workspace-access?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/webaskio-webask-workspace-access?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/webaskio-webask-workspace-access/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/webaskio-webask-workspace-access.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

webaskio. (2026). webask-workspace-access security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/webaskio-webask-workspace-access/audits/1

Citation BibTeX

@techreport{webaskio-webaskio-webask-workspace-access-2026,
  author = {webaskio},
  title = {webask-workspace-access security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/webaskio-webask-workspace-access/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "webask-workspace-access security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "webaskio"
date-released: "2026-09-29"
url: "https://skillstore.io/skills/webaskio-webask-workspace-access/audits/1"
identifiers:
  - type: other
    value: "skillstore:webaskio-webask-workspace-access:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Onboard a colleague

Invite a colleague and select the role and folders required for their work after inspecting existing access.

Diagnose missing surveys

Check invitation acceptance, assigned roles, and folder permissions when a colleague cannot see expected surveys.

Review excessive permissions

Compare member permissions with job tasks and identify where results-only access would be sufficient.

Essayez ces prompts

List current access

Show members and roles in [workspace]. Do not change any permissions.

Investigate missing surveys

Check why [member] cannot see surveys in [folder] within [workspace]. Inspect invitation status and permissions, then explain the cause without making changes.

Invite with limited access

Inspect roles in [workspace], then propose results-only access to [folder] for [email]. Ask me to confirm the role and folder before sending the invitation.

Plan a permission review

Review roles and folder access in [workspace] against [team responsibilities]. Propose minimal permissions and identify assigned roles before suggesting deletion. Make no changes without confirmation.

Bonnes pratiques

Inspect the selected workspace, member access, and roles before proposing changes.
Choose permissions from the member's actual tasks and grant only the required folders.
Confirm consequential changes and check role assignments before deleting any role.

Éviter

Granting full access merely to make a missing survey visible.
Removing a member without an explicit request.
Deleting a role before checking which members use it.

Foire aux questions

What must be configured before using this skill?

The assistant needs access to the listed WebAsk MCP tools and an account authorized for the requested operations.

Why does an invited member still lack access?

The member must accept the invitation. Appearing in the member list alone does not mean access is active.

Why can a member have a role but see no surveys?

The required folders may be inaccessible. A restriction to personally created surveys can also limit visibility.

Can this skill change roles and folder permissions?

It guides the corresponding WebAsk MCP tools, subject to account authorization. It recommends inspecting existing access and granting only needed permissions.

Can a removed member simply be restored?

The skill states that a removed member must receive a new invitation. It prohibits removal without an explicit request.

What happens when an account limit prevents an action?

The skill instructs the assistant to explain the limit and stop, without recommending a plan change or directing the user to payment.