using-git-worktrees
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute several shell commands to manage the Git environment and project lifecycle, including
git worktree,git check-ignore, and build-related tools such asnpm,cargo,pip, andgo. - [EXTERNAL_DOWNLOADS]: Automated dependency installation via
npm install,pip install, and other package managers may trigger downloads from official public registries (such as npmjs.org or pypi.org) based on the contents of the project's configuration files. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting data from the project's
CLAUDE.mdfile to determine directory preferences. - Ingestion points:
CLAUDE.mdis searched viagrepfor worktree configuration strings. - Boundary markers: Absent; the skill does not explicitly define delimiters or instructions to ignore embedded commands within the ingested file.
- Capability inventory: The agent is authorized to create directories, modify the local
.gitignorefile, install software packages, and execute project tests. - Sanitization: There is no explicit sanitization of the strings retrieved from
CLAUDE.mdbefore they are used in the directory selection logic.
Audit Metadata