create-worktree

SUSPICIOUS. The core purpose aligns with git worktree creation, but the skill’s footprint expands into executing project-configured shell commands and launching an unattended Claude session with safety prompts disabled. There is no clear credential exfiltration or malicious data routing, but the bypassed approvals and autonomous follow-on actions make the skill high-risk relative to its stated convenience function.