yggtree
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents various commands for the
yggtreeCLI tool, such asyggtree create,yggtree wc, andyggtree bootstrap. These commands are standard for managing development environments and worktrees. - [REMOTE_CODE_EXECUTION]: The
yggtree bootstrapcommand involves running setup tasks likenpm installor custom scripts defined in.yggtree/worktree-setup.json. These are standard development workflows for initializing project dependencies and do not involve untrusted remote sources beyond standard package registries. - [DATA_EXPOSURE]: The skill mentions optional copying of local
.envfiles during worktree creation. The instructions correctly characterize this as an opt-in step for carrying local machine state and advise caution for automated or scripted runs, following standard security practices for secret management.
Audit Metadata