using-git-worktrees

Pass

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various shell commands to manage Git worktrees, including git worktree add, git rev-parse, and git check-ignore.
  • [COMMAND_EXECUTION]: Automates project environment setup by running standard package managers such as npm install, pip install, cargo build, poetry install, and go mod download based on detected project files.
  • [COMMAND_EXECUTION]: Executes project-specific test suites (npm test, cargo test, pytest, go test) to verify the integrity of the newly created workspace.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads project-specific configuration from CLAUDE.md to determine worktree directory preferences.
  • Ingestion points: CLAUDE.md via grep operations.
  • Boundary markers: Not explicitly defined in the command execution logic.
  • Capability inventory: Full shell access for Git operations and package management.
  • Sanitization: None; the skill assumes the repository's configuration file is trustworthy.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 14, 2026, 12:14 AM
Security Audit — agent-trust-hub — using-git-worktrees