yggtree

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents various commands for the yggtree CLI tool, such as yggtree create, yggtree wc, and yggtree bootstrap. These commands are standard for managing development environments and worktrees.
  • [REMOTE_CODE_EXECUTION]: The yggtree bootstrap command involves running setup tasks like npm install or custom scripts defined in .yggtree/worktree-setup.json. These are standard development workflows for initializing project dependencies and do not involve untrusted remote sources beyond standard package registries.
  • [DATA_EXPOSURE]: The skill mentions optional copying of local .env files during worktree creation. The instructions correctly characterize this as an opt-in step for carrying local machine state and advise caution for automated or scripted runs, following standard security practices for secret management.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 03:09 AM
Security Audit — agent-trust-hub — yggtree