git-worktrees
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Performs git worktree management and environment setup. All shell-bound variables, such as issue IDs and branch descriptions, are strictly validated against regex patterns to prevent shell command injection.
- [EXTERNAL_DOWNLOADS]: Downloads project dependencies from well-known official registries (npm, PyPI, etc.) when standard configuration files are detected in the repository.
- [PROMPT_INJECTION]: Implements protections against indirect prompt injection from user-provided task plans and designs.
- Ingestion points: Reads task context from
docs/plans/*.mdanddocs/designs/*.md. - Boundary markers: Includes clear instructions for the agent to treat external file content as data only and ignore embedded instructions.
- Capability inventory: Shell access for git operations, dependency installers, and build/test tools.
- Sanitization: Input validation on user-controlled strings used in CLI calls.
Audit Metadata