git-worktree

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates Git worktree operations including creation, switching, and cleanup through a bash script. Destructive actions require user confirmation.
  • [DATA_EXFILTRATION]: The script handles the local transfer of sensitive environment files (.env*) between directories to ensure development consistency. This operation is confined to the local project structure and involves no external network transmission.
  • [REMOTE_CODE_EXECUTION]: The utility automates the 'trust' and 'allow' commands for dev tools (mise, direnv), which enable local script execution. To mitigate risks, it implements a hash-based verification system that compares configuration files against a trusted origin branch (e.g., 'main') before granting trust.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 03:11 PM
Security Audit — agent-trust-hub — git-worktree