Habilidades webask-workspace-access

📦

webask-workspace-access

Name: webask-workspace-access
Author: webaskio

Revisão do conteúdo r1 Seguro 📁 Acesso ao sistema de arquivos⚙️ Comandos externos

Manage WebAsk Workspace Access

Missing folder permissions and unaccepted invitations can prevent colleagues from seeing surveys. This skill guides WebAsk MCP tools to inspect access and apply task-specific permissions.

Suporta: Claude Codex Code(CC)

🥉 77 Bronze

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "webask-workspace-access" from https://skillstore.io/skills/webaskio-webask-workspace-access.md and its manifest at https://skillstore.io/api/skills/webaskio-webask-workspace-access/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/webaskio-webask-workspace-access.md manifest assinado GET /api/skills/webaskio-webask-workspace-access/manifest lockfile assinado GET /api/skills/webaskio-webask-workspace-access/lockfile

Testar

Usando "webask-workspace-access". In this example, a colleague has an Analyst role but no assigned folders. Why is the survey list empty?

Resultado esperado:

The role does not provide access to the needed folders. Grant only the relevant folder access after confirming the colleague's task.

Usando "webask-workspace-access". In this example, an invited colleague appears in the member list but has not accepted the invitation.

Resultado esperado:

The pending invitation does not provide access yet. The colleague must accept it; the invitation can be resent when requested.

Usando "webask-workspace-access". A colleague has full access but only needs to view results. What should I review?

Resultado esperado:

Check the current role and folder access.
Select a role without editing privileges and retain only the required folders.
Do not remove the member unless explicitly requested.

Auditoria de segurança

Seguro

v1 • 29/09/2026 Abrir o relatório versionado

All 13 static findings are false positives: one documentation navigation link and twelve Markdown references to MCP tools. No evidence found of prompt injection, unauthorized data transfer, or shell execution in the reviewed files. The skill guides legitimate permission changes and includes safeguards against excessive privileges, unsolicited member removal, and deleting assigned roles.

Arquivos analisados

190

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Fatores de risco

📁 Acesso ao sistema de arquivos (1)

README.md:1

⚙️ Comandos externos (12)

SKILL.md:15 SKILL.md:16 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:35

A auditoria estática e semântica concluída mais recente não detectou achados de segurança confirmados. Isso não comprova que a skill não tenha efeitos colaterais.

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/webaskio-webask-workspace-access/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/webaskio-webask-workspace-access/security.svg)](https://skillstore.io/skills/webaskio-webask-workspace-access?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/webaskio-webask-workspace-access?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/webaskio-webask-workspace-access/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/webaskio-webask-workspace-access.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

webaskio. (2026). webask-workspace-access security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/webaskio-webask-workspace-access/audits/1

Citação BibTeX

@techreport{webaskio-webaskio-webask-workspace-access-2026,
  author = {webaskio},
  title = {webask-workspace-access security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/webaskio-webask-workspace-access/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "webask-workspace-access security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "webaskio"
date-released: "2026-09-29"
url: "https://skillstore.io/skills/webaskio-webask-workspace-access/audits/1"
identifiers:
  - type: other
    value: "skillstore:webaskio-webask-workspace-access:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Onboard a colleague

Invite a colleague and select the role and folders required for their work after inspecting existing access.

Diagnose missing surveys

Check invitation acceptance, assigned roles, and folder permissions when a colleague cannot see expected surveys.

Review excessive permissions

Compare member permissions with job tasks and identify where results-only access would be sufficient.

Teste estes prompts

List current access

Show members and roles in [workspace]. Do not change any permissions.

Investigate missing surveys

Check why [member] cannot see surveys in [folder] within [workspace]. Inspect invitation status and permissions, then explain the cause without making changes.

Invite with limited access

Inspect roles in [workspace], then propose results-only access to [folder] for [email]. Ask me to confirm the role and folder before sending the invitation.

Plan a permission review

Review roles and folder access in [workspace] against [team responsibilities]. Propose minimal permissions and identify assigned roles before suggesting deletion. Make no changes without confirmation.

Boas práticas

Inspect the selected workspace, member access, and roles before proposing changes.
Choose permissions from the member's actual tasks and grant only the required folders.
Confirm consequential changes and check role assignments before deleting any role.

Evitar

Granting full access merely to make a missing survey visible.
Removing a member without an explicit request.
Deleting a role before checking which members use it.

Perguntas frequentes

What must be configured before using this skill?

The assistant needs access to the listed WebAsk MCP tools and an account authorized for the requested operations.

Why does an invited member still lack access?

The member must accept the invitation. Appearing in the member list alone does not mean access is active.

Why can a member have a role but see no surveys?

The required folders may be inaccessible. A restriction to personally created surveys can also limit visibility.

Can this skill change roles and folder permissions?

It guides the corresponding WebAsk MCP tools, subject to account authorization. It recommends inspecting existing access and granting only needed permissions.

Can a removed member simply be restored?

The skill states that a removed member must receive a new invitation. It prohibits removal without an explicit request.

What happens when an account limit prevents an action?

The skill instructs the assistant to explain the limit and stop, without recommending a plan change or directing the user to payment.