using-git-worktrees
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands for repository management and environment verification.\n
- Shell commands such as
git worktree add,git rev-parse, andgit check-ignoreare utilized for Git operations as described inSKILL.md.\n - It executes package manager commands including
npm install,cargo build,pip install, andgo mod downloadto configure the workspace inSKILL.md.\n - It runs test suites using commands like
npm test,cargo test, andpytestinSKILL.md.\n- [EXTERNAL_DOWNLOADS]: The skill downloads dependencies from official package registries based on project configuration.\n - Fetches Node.js packages via
npm installfrom the official registry.\n - Fetches Rust dependencies via
cargo buildfrom the official crates registry.\n - Fetches Python packages via
pip installorpoetry installfrom the official PyPI registry.\n - Fetches Go modules via
go mod downloadfrom the official Go proxy.\n- [INDIRECT_PROMPT_INJECTION]: The skill reads project configuration files which could contain untrusted data.\n - Ingestion points: The agent reads the
CLAUDE.mdfile and manifest files likepackage.jsonto determine directory preferences and project types inSKILL.md.\n - Boundary markers: No delimiters or instructions are present to prevent the agent from acting on malicious instructions hidden within project files.\n
- Capability inventory: The skill can execute shell commands, install packages, and run tests as defined in
SKILL.md.\n - Sanitization: There is no evidence of sanitization for strings extracted from
CLAUDE.mdbefore they are used to influence the agent's actions.
Audit Metadata