Workspace — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Workspace (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Collaborative workspace with real-time editing, bidirectional links, and AI-powered search.
Hyperclast workspace
Create backend/.env-docker:
SECRET_KEY=$(openssl rand -base64 32)
ENCRYPTION_KEY=$(python3 -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())")
cat << EOF > backend/.env-docker
WS_SECRET_KEY=${SECRET_KEY}
WS_ENCRYPTION_KEY=${ENCRYPTION_KEY}
WS_DB_USER=hyperclast
WS_DB_PASSWORD=hyperclast_pw
WS_DB_NAME=hyperclast
WS_ROOT_URL=http://localhost:9800
EOFRun:
./run-stack.sh 9800 # Start stack with MinIO (webapp at localhost:9800)
./restart-stack.sh backend # Restart Django after code changes
./restart-stack.sh ls # List running stacksSee backend/.env-template for all configuration options.
Upgrading? If you previously ran the Docker stack, the frontend-node-modules volume may be owned by root. Remove it once so it gets recreated with correct permissions:>
``sh # Find the volume name docker volume ls | grep frontend-node-modules # Remove it (stack must be stopped) docker volume rm <volume-name> ``See Local Development Guide for running without Docker.
File uploads are disabled by default. To enable, add to your .env:
WS_FILEHUB_FEATURE_ENABLED=true
WS_FILEHUB_PRIMARY_UPLOAD_TARGET=r2
WS_FILEHUB_R2_ACCOUNT_ID=<your-account-id>
WS_FILEHUB_R2_ACCESS_KEY_ID=<access-key-id>
WS_FILEHUB_R2_SECRET_ACCESS_KEY=<secret-access-key>
WS_FILEHUB_R2_BUCKET=hyperclast-ws-uploadsSee Cloudflare R2 Setup Guide for detailed instructions.
MinIO is included by default in the Docker stack, so file uploads work out of the box (S3 API on port 9000, console on port 9001). To disable MinIO, use ./run-stack.sh --no-minio 9800. See MinIO Local Setup for details.
Import pages from Notion using their Markdown & CSV export:
Note: Importing requires editor permissions on the project. Viewers cannot import.
Features:
See Import System Documentation for architecture details.
Copyright (c) 2025-2026 histre inc.
The source code of this project is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0-only), an OSI-approved open-source license. See LICENSE for the full text.
including businesses of any size
including as a hosted service, you must offer those users the complete source of your modified version under the AGPL (section 13)
If you cannot or do not want to comply with the AGPL (for example, you want to keep your modifications private or embed the code in proprietary software), a commercial license is available. See COMMERCIAL_LICENSE.md.
Standalone libraries published from this project (for example the MCP server under mcp/) carry their own permissive licenses; see the LICENSE file in each directory.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.