git-worktrees
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes bash scripts (create_worktree.sh, cleanup_worktrees.sh, list_worktrees.sh, and sync_worktree.sh) to automate Git worktree tasks. These scripts perform file system operations like directory creation and removal via Git commands.
- [EXTERNAL_DOWNLOADS]: The sync_worktree.sh script executes git fetch origin, connecting to the remote repository to update branch information. This is standard Git functionality.
- [INDIRECT_PROMPT_INJECTION]: The scripts take branch names as input from the user. The create_worktree.sh script filters these inputs using tr and sed to prevent command injection.
- Ingestion points: Feature and base branch names provided to create_worktree.sh and sync_worktree.sh.
- Boundary markers: None (interactive shell scripts).
- Capability inventory: Git command execution and file system management.
- Sanitization: Use of a restrictive whitelist filter in create_worktree.sh.
Audit Metadata