worktrees
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill automates standard development operations using
git,npm,pip,poetry,cargo, andgo. These commands are only executed after detecting relevant project files (e.g.,package.json,requirements.txt), which is expected behavior for a development-focused agent skill. - [SAFE]: Implements mandatory safety verification using
git check-ignoreto ensure worktree contents are not accidentally committed to the repository. It also includes logic to automatically fix missing.gitignoreentries. - [SAFE]: No instances of obfuscation, remote code execution from untrusted sources, or data exfiltration were found. The skill's access to local configuration directories is consistent with its stated purpose of workspace management.
Audit Metadata