git-prefs
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/empty-worktree.mjsutilizesexecFileSyncto run Git commands such asgit rev-parse,git symbolic-ref, andgit worktree prune. These are used for repository metadata verification and are implemented using safe execution methods without shell spawning. - [COMMAND_EXECUTION]: The utility
scripts/empty-worktree.mjsperforms recursive file system deletions usingrmSyncto clear a Git worktree's contents. The script includes robust safety logic, specifically refusing to run if the current directory is the primary repository checkout or if the user is not at the worktree root, mitigating the risk of accidental data loss. - [DYNAMIC_EXECUTION]: The
SKILL.mdinstructions require the agent to executenode scripts/check.mjsbefore committing changes in specific contexts (thegitbobobo/skillsrepository). This script is not provided in the skill bundle, meaning the agent will attempt to execute a local file whose contents are determined by the repository environment.
Audit Metadata