worktrees
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Git commands (
git rev-parse,git status,git worktree,git switch) to manage branches and worktrees. This is required for its workspace isolation functionality. - [EXTERNAL_DOWNLOADS]: The agent is instructed to use
npx @ericrisco/rscfor managing the lifecycle of worktrees. Use ofnpxinvolves fetching and executing a Node.js package from the registry. The package belongs to the vendor's (ericrisco) namespace, consistent with the skill's authorship and stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill reads from
02-DOCS/wiki/harness/user-profile.mdto adjust its communication tone (technical vs. non-technical). This ingestion point is limited to stylistic selection and does not introduce security risks as the data does not influence command parameters or system-level triggers.
Audit Metadata