create-worktree

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local shell script (create-worktree.sh) to automate the Git worktree creation process and file synchronization.
  • [COMMAND_EXECUTION]: The AI agent is instructed to change its current working directory (CWD) to the newly created worktree path provided by the script output.
  • [SAFE]: The shell script uses robust practices including set -euo pipefail, double-quoting of variables, and sanitization of the user-provided branch name (replacing / with -) to prevent path traversal or unintended command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 03:29 AM
Security Audit — agent-trust-hub — create-worktree