ce-worktree

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local shell commands via scripts/worktree-manager.sh to manage git worktrees, including git worktree, mkdir, and cp operations.
  • [DATA_EXPOSURE]: The script copies .env files (excluding .env.example) from the main repository to the new worktree directory. These files may contain sensitive credentials. This is a documented feature for environment consistency, the operation remains local to the machine, and the script automatically adds the .worktrees directory to .gitignore to prevent accidental commits.
  • [REMOTE_CODE_EXECUTION]: The skill interacts with development tools like mise and direnv which can execute code based on local configuration files. The script implements an 'auto-trust' security mechanism that verifies the integrity of these configuration files against a trusted base branch (e.g., main or develop) using git hash-object before granting trust, mitigating the risk of executing malicious configurations from untrusted feature or PR branches.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 07:15 PM