using-git-worktrees
Warn
Audited by Socket on Aug 27, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s actual footprint is broader than its stated purpose. It looks like a thin alias for legacy `using-git-worktrees`, but mostly imposes global workflow rules and routes work into other agents/tools, including external MCP-backed services. No direct malware or covert exfiltration is present, but the capability scope and transitive trust are not well aligned with a simple git-worktree compatibility skill.
Confidence: 84%Severity: 57%
Audit Metadata