workspace

name	workspace
description	Guides workspace and session management. Use this when working on session_manager.py, workspace_manager.py, or anything related to session isolation.

Workspace Skill

Session Isolation Rule

Every session MUST have its own isolated workspace. Sessions never share files or memory.

Workspace Structure

workspaces/{session_id}/
├── .agent/
│   ├── plan.json         # task decomposition
│   ├── findings.json     # persisted findings
│   └── context.json      # conversation history
├── scans/                # nmap, sqlmap outputs
├── exploits/             # agent-written scripts
├── loot/                 # captured data
├── artifacts/            # every tool call output
└── reports/              # final reports

WorkspaceManager Rules

1. Always create full directory tree on session creation
2. Notify frontend via WebSocket on every file write
3. Never delete workspace files during active session
4. tree() method returns full file structure for explorer

File Naming

• Scan outputs: scans/{tool}_{target}_{timestamp}.txt
• Artifacts: artifacts/{tool_name}_{timestamp}.txt
• Exploits: exploits/{cve_or_name}.py
• Reports: reports/report_{timestamp}.md