dbk-git-worktree
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands including
git branch,git rev-parse, andgit worktree addto manage development environments. These operations are restricted to the local filesystem and the repository context. - [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read existing branch names to inform its naming suggestions. This represents a data ingestion point for potentially untrusted data. However, the risk is mitigated by a mandatory human-in-the-loop step where the user must confirm the suggested branch name before any creation command is executed.
- [SAFE]: No evidence of credential theft, obfuscation, persistence mechanisms, or unauthorized network activity was found. The skill serves a legitimate developer workflow purpose and enforces user oversight.
Audit Metadata