cmd-worktree-merge
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs several Git operations, including listing worktrees, merging branches, and removing worktrees/branches. These operations are restricted to the local repository and are appropriate for the skill's stated purpose.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection from untrusted repository metadata.
- Ingestion points: Branch names and directory paths retrieved via
git worktree list(SKILL.md). - Boundary markers: Absent; branch names and worktree paths are processed without delimiters or explicit safety instructions.
- Capability inventory: Subprocess execution for merging and deleting branches/worktrees (SKILL.md).
- Sanitization: None; external data from the Git environment is interpolated into commands without escaping or validation.
Audit Metadata