worktrees
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard Git commands (e.g.,
git worktree,git fetch,git rev-parse) to manage repository state. These commands are localized to the user's repository and do not interact with non-standard services. - [COMMAND_EXECUTION]: The
scripts/new-worktree.shscript performs basic validation on the<local-dir>argument to ensure it is a direct child of the repository root, preventing simple directory traversal. - [COMMAND_EXECUTION]: Branch names are validated using
git check-ref-format --branchbefore being used in shell commands, reducing the risk of command injection via branch names.
Audit Metadata