git-worktree

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides a set of instructions for managing Git worktrees with appropriate safety guards.
  • [COMMAND_EXECUTION]: The skill executes Git shell commands to manage worktrees. Security is maintained through the use of native Git tools and explicit state verification steps.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Git outputs and user inputs. It employs a sanitization strategy for folder names to prevent command injection and uses repository state checks to ensure operations are performed on valid targets. 1. Ingestion points: Git command output (git worktree list, git status) and user-supplied branch/task names. 2. Boundary markers: The skill uses Git's porcelain output format which is structured. 3. Capability inventory: Shell command execution (git, mkdir, printf), directory traversal, and context switching (cd). 4. Sanitization: Employs a specific slugging algorithm to sanitize folder names, rejecting reserved labels and shell-sensitive characters.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 01:41 PM