using-git-worktrees
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes Git commands like
git worktree addandgit check-ignoreto manage isolated workspaces and project configuration. - [COMMAND_EXECUTION]: Automatically runs project build and test suites such as
npm test,cargo test,pytest, andgo testto verify the environment. - [EXTERNAL_DOWNLOADS]: Invokes official package managers including npm, pip, poetry, and cargo to fetch project dependencies from well-known registries.
- [PROMPT_INJECTION]: Ingests project-level configuration from
CLAUDE.mdto identify worktree path preferences. Evidence chain: Ingestion points: CLAUDE.md; Boundary markers: absent; Capability inventory: subprocess execution in SKILL.md; Sanitization: path validation via shell case statement logic.
Audit Metadata