platform-worktree
Warn
Audited by Socket on Mar 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s core Git worktree actions fit its stated purpose, but it goes beyond simple worktree management by automatically trusting local config, installing dependencies, and copying multiple sensitive credential/key files into each new worktree. The behavior is plausibly for local platform development, yet the secret duplication and automatic trust/execution make the scope broader and riskier than a minimal worktree helper.
Confidence: 89%Severity: 61%
Audit Metadata