rebase-worktrees
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard git and package management commands including
git worktree,git rebase,npm install,yarn install,pnpm install, andbun install. These operations are used to update project worktrees and synchronize dependencies, which is consistent with the skill's stated purpose. - [DATA_EXFILTRATION]: The skill accesses
.envfiles to synchronize environment variable keys across worktrees. Although.envfiles contain sensitive information, this behavior is a documented core feature of the skill, is performed entirely locally between the user's own directories, and requires explicit user confirmation via a prompt before any file modifications are applied. No network exfiltration or unauthorized access patterns were detected.
Audit Metadata