git-worktree
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses git and shell commands to create worktrees, manage directories, and create symlinks for package dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied branch names as input. Ingestion points: $BRANCH_NAME argument in SKILL.md; Boundary markers: None; Capability inventory: git, ln, pnpm, npx, cargo, pip, go in SKILL.md; Sanitization: A regex validation check ensures input characters are restricted to a safe alphanumeric set before execution.
- [SAFE]: The skill's operations, including package installation and background testing, are standard development tasks performed locally within the user's repository.
Audit Metadata