git-worktree-clean

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/git_worktree_clean.py executes various git commands (such as worktree list, rev-parse, and branch -d) to manage the repository state. These calls are essential to the skill's stated purpose of worktree maintenance.
  • [SAFE]: The Python script implements secure command execution patterns by using subprocess.run with argument lists instead of shell strings, which prevents shell injection vulnerabilities.
  • [SAFE]: The utility includes robust safety features, such as a --dry-run flag to preview changes and a PROTECTED_BRANCHES list (main, master, develop, staging, production) that prevents the tool from ever attempting to remove critical development branches.
  • [EXTERNAL_DOWNLOADS]: The script uses the rich Python library for terminal formatting, which is a standard, well-known dependency in the Python ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 08:50 AM
Security Audit — agent-trust-hub — git-worktree-clean