The Agent Skills Directory

[COMMAND_EXECUTION]: The git_worktree.py script executes git and direnv commands using subprocess.run. It employs a strict regex validation (^[a-zA-Z0-9/_-]+$) on the worktree name argument to prevent shell injection attacks.
[COMMAND_EXECUTION]: The skill's language-specific setup references instruct the agent to use standard development tools and package managers (such as npm, yarn, pnpm, go, cargo, and uv) to manage dependencies and run build/test tasks.
[EXTERNAL_DOWNLOADS]: Following the project setup instructions for Node.js, Python, Go, and Rust involves downloading dependencies from official software registries (e.g., npm, PyPI).
[DATA_EXFILTRATION]: The skill automates the copying of local configuration files like .env and .envrc into the newly created worktree. The documentation includes explicit warnings against printing, logging, or otherwise exposing the contents of these sensitive files.

git-worktree