using-git-worktrees

SUSPICIOUS. The skill’s core git/tmux behavior matches its stated purpose, but it broadens impact by auto-installing dependencies and can launch unattended Claude tasks with permission checks disabled. No clear credential theft or off-purpose data exfiltration is present, so this is not malicious, but it carries medium operational and supply-chain risk.

The script is a legitimate worktree and development-environment automation helper, with no clear evidence of malware or intentional data theft. Its main security risks are unvalidated path input, direct execution of TASK_COMMAND, and automatic execution of dependency installation/build hooks. It should be used only with trusted arguments and repositories; validating WORKTREE_NAME and treating TASK_COMMAND as trusted input would reduce the risk.