Workspace — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Workspace (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Collaborative workspace with real-time editing, bidirectional links, and AI-powered search.
Hyperclast workspace
Create backend/.env-docker:
SECRET_KEY=$(openssl rand -base64 32)
ENCRYPTION_KEY=$(python3 -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())")
cat << EOF > backend/.env-docker
WS_SECRET_KEY=${SECRET_KEY}
WS_ENCRYPTION_KEY=${ENCRYPTION_KEY}
WS_DB_USER=hyperclast
WS_DB_PASSWORD=hyperclast_pw
WS_DB_NAME=hyperclast
WS_ROOT_URL=http://localhost:9800
EOFRun:
./run-stack.sh 9800 # Start stack with MinIO (webapp at localhost:9800)
./restart-stack.sh backend # Restart Django after code changes
./restart-stack.sh ls # List running stacksSee backend/.env-template for all configuration options.
Upgrading? If you previously ran the Docker stack, the frontend-node-modules volume may be owned by root. Remove it once so it gets recreated with correct permissions:>
``sh # Find the volume name docker volume ls | grep frontend-node-modules # Remove it (stack must be stopped) docker volume rm <volume-name> ``See Local Development Guide for running without Docker.
File uploads are disabled by default. To enable, add to your .env:
WS_FILEHUB_FEATURE_ENABLED=true
WS_FILEHUB_PRIMARY_UPLOAD_TARGET=r2
WS_FILEHUB_R2_ACCOUNT_ID=<your-account-id>
WS_FILEHUB_R2_ACCESS_KEY_ID=<access-key-id>
WS_FILEHUB_R2_SECRET_ACCESS_KEY=<secret-access-key>
WS_FILEHUB_R2_BUCKET=hyperclast-ws-uploadsSee Cloudflare R2 Setup Guide for detailed instructions.
MinIO is included by default in the Docker stack, so file uploads work out of the box (S3 API on port 9000, console on port 9001). To disable MinIO, use ./run-stack.sh --no-minio 9800. See MinIO Local Setup for details.
Import pages from Notion using their Markdown & CSV export:
Note: Importing requires editor permissions on the project. Viewers cannot import.
Features:
See Import System Documentation for architecture details.
The source code of this project is licensed under the Elastic License v2 (ELv2). See LICENSE for details.
If you are a business using this software beyond personal or evaluation use, you must obtain a commercial license. See COMMERCIAL_LICENSE for details.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.