git-worktrees

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands to create Git worktrees, manage .gitignore entries, and invoke project-specific build or test tools like npm, cargo, and pytest.
  • [EXTERNAL_DOWNLOADS]: The skill triggers dependency installation using standard package managers such as npm, pip, and poetry, which fetch packages from official public registries.
  • [PROMPT_INJECTION]: The skill reads configuration preferences from the CLAUDE.md file to determine directory locations. (1) Ingestion points: Reads from CLAUDE.md via grep. (2) Boundary markers: Absent. (3) Capability inventory: Full shell command execution, file system modification, and network access via package managers. (4) Sanitization: None applied to the extracted preference strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 01:52 PM