wts-expert
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and interactive assistance for using the
@desplega.ai/wtsCLI tool, which is a legitimate utility from the skill's author (desplega-ai). - [COMMAND_EXECUTION]: The skill includes instructions for common Git worktree operations (e.g.,
wts create,wts list,wts switch). All commands are standard for the tool's purpose and involve typical development workflows like branch management and tmux integration. - [DATA_EXPOSURE_EXFILTRATION]: The skill references global configuration stored in
~/.wts.jsonand project configuration in.wts-config.json. This is standard practice for CLI tools and does not involve sensitive credentials or unauthorized data exfiltration. - [REMOTE_CODE_EXECUTION]: The skill suggests installing the tool via
npm install -g @desplega.ai/wts. As this package belongs to the verified authordesplega-ai, this is considered normal installation behavior. - [DYNAMIC_EXECUTION]: The skill mentions a
setupScriptfield in the project configuration (.wts-config.json). This allows users to define local scripts to run after worktree creation, which is a standard feature for developer productivity tools and is triggered by local configuration.
Audit Metadata