using-git-worktrees

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various shell commands to manage Git repositories and local file systems.
  • Evidence: Uses git worktree add, git check-ignore, and git rev-parse for repository management.
  • Evidence: Uses ls, grep, and mkdir for directory discovery and configuration.
  • Evidence: Automatically runs project tests using tools like npm test, cargo test, pytest, and go test to establish a baseline.
  • [EXTERNAL_DOWNLOADS]: The skill triggers package managers to download and install dependencies for the project being worked on.
  • Evidence: Detects and runs npm install, pip install, poetry install, cargo build, and go mod download based on the project's configuration files.
  • [DATA_EXPOSURE]: The skill interacts with a specific configuration path in the user's home directory (~/.config/superpowers/worktrees/) to maintain global worktree storage.
  • Evidence: Shell logic includes paths within the ~/.config subdirectory for organizational purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 11:20 PM
Security Audit — agent-trust-hub — using-git-worktrees