git-worktrees
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs Git operations and executes build/test tools including npm, cargo, pip, and pytest to manage worktrees and verify project state.
- [EXTERNAL_DOWNLOADS]: Invokes package managers to fetch dependencies from official registries (npm, PyPI, etc.) as part of the workspace initialization process.
- [PROMPT_INJECTION]: Processes local project manifests and test results to automate workspace setup.
- Ingestion points: Reads
package.json,Cargo.toml,requirements.txt,Gemfile,go.mod, and terminal output from test commands. - Boundary markers: Not explicitly defined for external data ingestion.
- Capability inventory: Executes shell commands for git management, dependency installation, and testing.
- Sanitization: Relies on standard package manager behavior and does not perform independent sanitization of project files or test outputs.
Audit Metadata