worktree-doctor
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/worktree_doctor.pyexecutes localgitcommands (git rev-parse,git ls-files) to retrieve repository metadata. These commands are invoked using safe subprocess practices with hardcoded arguments for read-only operations. - [EXTERNAL_DOWNLOADS]: The skill declares a dependency on the
richPython library via a PEP 723 header inscripts/worktree_doctor.py.richis a well-known and trusted package for terminal formatting.
Audit Metadata