using-git-worktrees

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard development commands such as git worktree, npm install, cargo build, and pip install to manage workspaces and project dependencies. These operations are performed within the local project context and are triggered by the presence of standard configuration files.\n- [INDIRECT_PROMPT_INJECTION]: The skill adapts its configuration based on external project files like CLAUDE.md.\n
  • Ingestion points: CLAUDE.md, package.json, Cargo.toml, requirements.txt, pyproject.toml, go.mod.\n
  • Boundary markers: None explicitly defined for file ingestion.\n
  • Capability inventory: Local filesystem access, shell command execution, and automated dependency management.\n
  • Sanitization: Path construction utilizes shell case statements to validate variables against expected patterns, mitigating potential directory traversal or command injection risks from configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 07:35 PM