wts-expert

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and interactive assistance for using the @desplega.ai/wts CLI tool, which is a legitimate utility from the skill's author (desplega-ai).
  • [COMMAND_EXECUTION]: The skill includes instructions for common Git worktree operations (e.g., wts create, wts list, wts switch). All commands are standard for the tool's purpose and involve typical development workflows like branch management and tmux integration.
  • [DATA_EXPOSURE_EXFILTRATION]: The skill references global configuration stored in ~/.wts.json and project configuration in .wts-config.json. This is standard practice for CLI tools and does not involve sensitive credentials or unauthorized data exfiltration.
  • [REMOTE_CODE_EXECUTION]: The skill suggests installing the tool via npm install -g @desplega.ai/wts. As this package belongs to the verified author desplega-ai, this is considered normal installation behavior.
  • [DYNAMIC_EXECUTION]: The skill mentions a setupScript field in the project configuration (.wts-config.json). This allows users to define local scripts to run after worktree creation, which is a standard feature for developer productivity tools and is triggered by local configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 11:34 PM