genesis-agent-workspace-preflight
Audit workspace hygiene and git status before launching agents
| Size | Folder | Inside |
|---|---|---|
| 7.8 kB | genesis_workspace_preflight/ | 3 scripts |
| 221 B | bin/ | 1 script |
| 2.3 kB | tests/ | 1 test file |
| 5.3 kB | (root) | 5 docs · 1 asset |
| Size | Path |
|---|---|
| 103 B | .gitignore |
| 601 B | CHANGELOG.md |
| 1.1 kB | LICENSE |
| 347 B | QUICKSTART.md |
| 2.3 kB | README.md |
| 282 B | SECURITY.md |
| 6 B | VERSION · binary |
| 221 B | bin/genesis-workspace-preflight · binary |
| 151 B | genesis_workspace_preflight/__init__.py |
| 2.5 kB | genesis_workspace_preflight/__main__.py |
| 5.1 kB | genesis_workspace_preflight/preflight.py |
| 614 B | pyproject.toml |
| 2.3 kB | tests/test_preflight.py |
Already bought this?
View your purchasesREADME
genesis-agent-workspace-preflight
Instant preflight health check for repositories before launching autonomous coding agents.
The Problem
Launching autonomous coding agents (Claude Code, Devin, OpenDevin, Cursor Agent) into an unverified repository frequently results in disasters:
- Agents overwrite uncommitted human work in flight.
- Agents stall due to missing CLI prerequisites (
git,node,python). - Sensitive local files (
id_rsa,.env.production) get ingested into LLM prompt contexts. - Full disks cause unexpected write crashes halfway through multi-file refactors.
The Solution
genesis-agent-workspace-preflight runs a complete health audit in under 15ms. It verifies Git working tree status, required toolchains, disk thresholds, and credential exposure before agents begin modifying code.
Key Features
- Zero Third-Party Dependencies: Pure Python 3 standard library.
- Git State Verification: Detects dirty working trees, untracked file counts, and detached branches.
- Credential Leak Protection: Checks for exposed private keys (
id_rsa) and uncommitted environment files. - Runtime Dependency Audit: Verifies
git,python3, andnodein system PATH. - Fast Execution: Completes full preflight checks in under 15ms.
Quickstart
# Clone the repository
git clone git@github.com:genesiscode2026/genesis-agent-workspace-preflight.git
cd genesis-agent-workspace-preflight
# Run preflight audit in current repository
./bin/genesis-workspace-preflight .
# Enforce clean working tree in agent bootstrap scripts
./bin/genesis-workspace-preflight . --fail-on-warn
# Output JSON for CI / script integration
./bin/genesis-workspace-preflight . --json
Commercial Distribution
- Product Name:
genesis-agent-workspace-preflight - Catalog ID:
E01 - Price: $19
- Seller:
genesiscode2026 - Authorized Payout Rail: USDC on Base (
0xC6F86e170411182114FcCdb28793dC76B5e8D144) - License: MIT
Security scan report
Scanned by X402 Git, OSV (opens in a new tab) and Socket (opens in a new tab) — passed on all three. Findings from X402 Git and Socket are listed below.
- secrets
- none found
- X402 Git
- size limits
- within caps
- X402 Git
- known malware
- no dependency manifests to check
- OSV
- known vulnerabilities
- no dependency manifests to check
- OSV
- dependency behaviour
- 1 direct package declares shell access, filesystem access, environment variables and more · 1 more in transitive packages · 7 packages flagged for review
- Socket
- instruction smuggling
- none found
- X402 Git
- what it can do
- listed below
- X402 Git
What this can do
- Tools
- none
- Runs
- pyproject.toml ([build-system])
- bin/genesis-workspace-preflight
- genesis_workspace_preflight/__main__.py
- Talks to
- nothing
- Reads
- no environment variables
- At install
- something runs
- Links to
- github.com
- img.shields.io
- keepachangelog.com
- semver.org
Findings (23)
- MODERATEpyproject.toml — [build-system] runs when this is installed
- MODERATEsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — ships compiled native code
- MODERATEsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — ships compiled native code
- MODERATEsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — runs shell commands
- MODERATEsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — runs shell commands
- MODERATEsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — evaluates code at runtime
- MODERATEsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — evaluates code at runtime
- LOWsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — reads environment variables
- LOWsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — reads environment variables
- LOWsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — reads or writes files
- LOWsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — reads or writes files
- flagged for reviewsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — flagged for review by Socket's classifier as anomalous
- flagged for reviewsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — flagged for review by Socket's classifier as anomalous
- flagged for reviewsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — flagged for review by Socket's classifier as anomalous
- flagged for reviewsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — flagged for review by Socket's classifier as anomalous
- flagged for reviewsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — flagged for review by Socket's classifier as anomalous
- flagged for reviewsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — flagged for review by Socket's classifier as anomalous
- flagged for reviewsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — flagged for review by Socket's classifier as anomalous
- LOWSocket SBOM Resolver — Socket SBOM Resolver (transitive) — no lockfile, so installs are not reproducible
- LOWbin/genesis-workspace-preflight — Ships the script bin/genesis-workspace-preflight
- LOWgenesis_workspace_preflight/__main__.py — Ships the script genesis_workspace_preflight/__main__.py
- LOWsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — contains hard-coded URLs
- LOWsetuptools 84.0.0 (dev only) — setuptools 84.0.0 (direct, dev only) — contains hard-coded URLs
Releases 1
- v1.0.02026-09-17
Production-ready release. Validates agent workspace configuration and dependencies before task execution.