using-git-worktrees
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses git and standard build tools (npm, pip, cargo, go) to manage worktrees and dependencies.
- [EXTERNAL_DOWNLOADS]: Fetches dependencies from official registries via standard package managers during project setup.
- [DATA_EXPOSURE]: Accesses local project files and a configuration directory (~/.config/superpowers/worktrees/) for workspace organization.
- [PROMPT_INJECTION]: The skill processes untrusted local project files which creates a surface for indirect prompt injection. Ingestion points: reads directory preferences from CLAUDE.md. Boundary markers: absent. Capability inventory: execution of git, npm, pip, cargo, and go commands. Sanitization: none.
Audit Metadata