agh-worktree-isolation

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script allocate-isolation.py to manage environment configuration.
  • The script uses standard libraries (socket, tempfile, pathlib) to find available ports and create temporary directories for test isolation.
  • The output of the script consists of shell export statements intended to be sourced via eval by the agent to set the environment for subsequent tasks.
  • All file operations (creation of .agh directories) are scoped to either the system temporary directory or a specific _worktrees path within the project workspace.
  • No network exfiltration, hardcoded credentials, or obfuscated payloads were found in the instructions or the script.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 06:32 PM
Security Audit — agent-trust-hub — agh-worktree-isolation