worktree
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the
forge worktreeandforge cleancommands. These are legitimate development tools for managing project checkouts and dependencies (bun, pnpm, yarn, npm) as part of an isolated workflow. All documented operations are scoped to the local repository and do not exhibit suspicious patterns. - [REMOTE_CODE_EXECUTION]: The skill describes how the
forgetool automatically installs dependencies during worktree creation. This is a standard development workflow, and the tool uses the repository's detected package manager. No external or untrusted sources are specified. - [COMMAND_EXECUTION]: Provides guidance on using PowerShell extended-path (
\\?\) syntax for manual cleanup of directories on Windows if Git fails to remove them due to path length limitations. This is a common administrative workaround for local file system management.
Audit Metadata