| name | workspace |
| description | Guides workspace and session management. Use this when working on session_manager.py, workspace_manager.py, or anything related to session isolation. |
Workspace Skill
Session Isolation Rule
Every session MUST have its own isolated workspace. Sessions never share files or memory.
Workspace Structure
workspaces/{session_id}/
├── .agent/
│ ├── plan.json # task decomposition
│ ├── findings.json # persisted findings
│ └── context.json # conversation history
├── scans/ # nmap, sqlmap outputs
├── exploits/ # agent-written scripts
├── loot/ # captured data
├── artifacts/ # every tool call output
└── reports/ # final reports
WorkspaceManager Rules
- Always create full directory tree on session creation
- Notify frontend via WebSocket on every file write
- Never delete workspace files during active session
tree() method returns full file structure for explorer
File Naming
- Scan outputs:
scans/{tool}_{target}_{timestamp}.txt
- Artifacts:
artifacts/{tool_name}_{timestamp}.txt
- Exploits:
exploits/{cve_or_name}.py
- Reports:
reports/report_{timestamp}.md
