worktrunk
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of a hook system (e.g.,
post-start,pre-merge) defined in.config/wt.toml. These hooks execute arbitrary shell commands (e.g.,npm install,docker run). If an agent is instructed to use this tool on an untrusted repository, a malicious configuration file could lead to arbitrary command execution on the host machine. - [EXTERNAL_DOWNLOADS]: The skill references and promotes the use of the
worktrunkCLI tool, which is an external dependency hosted athttps://github.com/max-sixty/worktrunk. - [DATA_EXFILTRATION]: The skill describes functionality (
wt step copy-ignored) designed to copy git-ignored files, such as.envfiles containing credentials, from the default branch to new worktrees. While intended for development convenience, this facilitates the movement of sensitive data across the file system.
Audit Metadata