rebase-worktrees

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard git and package management commands including git worktree, git rebase, npm install, yarn install, pnpm install, and bun install. These operations are used to update project worktrees and synchronize dependencies, which is consistent with the skill's stated purpose.
  • [DATA_EXFILTRATION]: The skill accesses .env files to synchronize environment variable keys across worktrees. Although .env files contain sensitive information, this behavior is a documented core feature of the skill, is performed entirely locally between the user's own directories, and requires explicit user confirmation via a prompt before any file modifications are applied. No network exfiltration or unauthorized access patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 04:02 PM