git-worktree
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to manage Git worktrees, including
git worktree add,git worktree remove, andgit rev-parse. These are standard operations for isolating development tasks within a local repository. - [COMMAND_EXECUTION]: The instructions include standard package management commands like
npm ci,pnpm install,uv sync, andbundle installto bootstrap development environments. These are legitimate development workflows for installing project dependencies locally. - [DATA_EXPOSURE]: The skill recommends copying local environment configuration files (e.g.,
.env,.env.local) from the primary checkout to a new worktree. These are local file operations intended to maintain environment consistency and do not involve network operations or exfiltration to external services.
Audit Metadata