git-worktree

Pass

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to manage Git worktrees, including git worktree add, git worktree remove, and git rev-parse. These are standard operations for isolating development tasks within a local repository.
  • [COMMAND_EXECUTION]: The instructions include standard package management commands like npm ci, pnpm install, uv sync, and bundle install to bootstrap development environments. These are legitimate development workflows for installing project dependencies locally.
  • [DATA_EXPOSURE]: The skill recommends copying local environment configuration files (e.g., .env, .env.local) from the primary checkout to a new worktree. These are local file operations intended to maintain environment consistency and do not involve network operations or exfiltration to external services.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 20, 2026, 06:45 AM