ce-worktree
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands via
scripts/worktree-manager.shto manage git worktrees, includinggit worktree,mkdir, andcpoperations. - [DATA_EXPOSURE]: The script copies
.envfiles (excluding.env.example) from the main repository to the new worktree directory. These files may contain sensitive credentials. This is a documented feature for environment consistency, the operation remains local to the machine, and the script automatically adds the.worktreesdirectory to.gitignoreto prevent accidental commits. - [REMOTE_CODE_EXECUTION]: The skill interacts with development tools like
miseanddirenvwhich can execute code based on local configuration files. The script implements an 'auto-trust' security mechanism that verifies the integrity of these configuration files against a trusted base branch (e.g.,mainordevelop) usinggit hash-objectbefore granting trust, mitigating the risk of executing malicious configurations from untrusted feature or PR branches.
Audit Metadata