uninit-workos — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited uninit-workos (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The reverse of /init-workos. Walks the workspace, removes only the scaffold files that /init-workos created, and leaves every other file and folder untouched.
Three things, and only three things:
workos-init-scaffold v1 that /init-workos writes at the top of each file it creates.Anything without the sentinel — pre-existing documents, files the user wrote later, files created by /create-project — is never touched.
/init-workos writes this exact line at the top of every file it creates (after YAML frontmatter when present):
<!-- workos-init-scaffold v1 — created by /init-workos on YYYY-MM-DD. Remove via /uninit-workos. -->This skill matches the substring workos-init-scaffold v1. Anything containing that token is a scaffold file. Anything not containing it is user content and stays.
If the user removed the sentinel manually, the file looks like user content to this skill — it will be left alone. That's intentional: when in doubt, preserve.
Use the current working directory as the workspace root. State the path back to the user and confirm before scanning.
Recursively grep the workspace for files containing workos-init-scaffold v1. Limit to depth 3 (root → domain → project, or root → domain → group → project) to match what /init-workos could have created. Filenames to inspect:
CLAUDE.mdMEMORY.mdARCHIVE.mdSkip the same exclusion lists as init-workos: .git, .github, .obsidian, .claude, .vscode, .idea, node_modules, dist, build, target, __pycache__, .venv, venv, plugins, skills.
If zero scaffold files are found, stop and tell the user: "No /init-workos scaffold detected here. Nothing to undo."
For each file with the sentinel, classify it:
A rough heuristic for "clean":
*(nothing active yet)*, *(none yet)*, *(empty)*) still presentIf you can't confidently classify, default to Edited (safer — forces a user decision rather than silent deletion).
Present the findings as a single block:
Found 9 scaffold files from /init-workos:
Clean — safe to remove (5):
./CLAUDE.md
./ARCHIVE.md
./personal/CLAUDE.md
./personal/MEMORY.md
./clients/CLAUDE.md
Edited — needs your decision (4):
./MEMORY.md (added: "Active Projects" entries, 12 lines)
./clients/MEMORY.md (added: 2 entries under Key Decisions)
./clients/acme-corp/CLAUDE.md (added: Workflow steps)
./clients/acme-corp/MEMORY.md (added: Contacts section content)
Proceed? Three options:
(a) Remove all clean files; ask file-by-file about edited ones
(b) Remove only the clean files; leave edited ones alone
(c) CancelFor each file in the clean list, delete it. Report the count when done.
No folder cleanup — /init-workos doesn't create folders (only files), so there's nothing to remove on the folder side. If the user wants to delete now-empty folders, that's a separate explicit ask.
For each edited file, show:
Then ask: "What do you want to do with this file?"
When stripping, be conservative: only remove sections that are unchanged from the template. If a section has been edited even slightly, keep it.
Show the user a summary:
Removed:
./CLAUDE.md
./ARCHIVE.md
./personal/CLAUDE.md
./personal/MEMORY.md
./clients/CLAUDE.md
./clients/acme-corp/MEMORY.md (kept user content; stripped scaffold sections)
Left alone:
./MEMORY.md (user chose: leave alone)
./clients/MEMORY.md (user chose: leave alone)
./clients/acme-corp/CLAUDE.md (user chose: leave alone)
No other files or folders were touched.End with one line: "Workspace is back to its pre-init state for the files you removed. You can re-run /init-workos any time."
If the user wants a safety net, offer once at the start: "Want me to copy the scaffold files into .workos-uninit-backup/ before removing them, in case you change your mind?"
If yes, mirror the directory structure inside .workos-uninit-backup/<timestamp>/ and copy each file before deletion. If no, proceed without backup.
/create-project created, anything pre-existing — all left alone./init-workos doesn't create folders, so there's nothing to remove on the folder side. Empty subfolders the user wants to clean up are a separate manual step./init-workos never wrote there.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.