The Agent Skills Directory

[COMMAND_EXECUTION]: The worktree-manager.sh script executes git and shell commands based on branch names and paths provided by the user. Although the script uses double-quoting to prevent immediate shell metacharacter expansion, it does not include explicit validation or sanitization of these inputs against standard git branch naming conventions.
[DATA_EXFILTRATION]: The skill features a function to locate and copy .env files from the repository root to new worktree directories. This process replicates sensitive credentials across multiple local directories, increasing the potential exposure surface of the environment configuration.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local and remote git repository environments, creating a surface for indirect prompt injection.
Ingestion points: Data is sourced from the output of git branch, git worktree list, and git ls-remote (scripts/worktree-manager.sh).
Boundary markers: None implemented for input interpolation.
Capability inventory: The skill possesses capabilities for directory creation/deletion, file writing (.gitignore), sensitive file copying (.env), and branch/worktree management.
Sanitization: Inputs are quoted during interpolation but not sanitized for content.

git-worktree