git-worktree-clean
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/git_worktree_clean.pyexecutes variousgitcommands (such asworktree list,rev-parse, andbranch -d) to manage the repository state. These calls are essential to the skill's stated purpose of worktree maintenance. - [SAFE]: The Python script implements secure command execution patterns by using
subprocess.runwith argument lists instead of shell strings, which prevents shell injection vulnerabilities. - [SAFE]: The utility includes robust safety features, such as a
--dry-runflag to preview changes and aPROTECTED_BRANCHESlist (main,master,develop,staging,production) that prevents the tool from ever attempting to remove critical development branches. - [EXTERNAL_DOWNLOADS]: The script uses the
richPython library for terminal formatting, which is a standard, well-known dependency in the Python ecosystem.
Audit Metadata