super-worktree
Warn
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill implements a 'Lifecycle hooks' feature that executes arbitrary shell commands defined in configuration files.
- Evidence found in
scripts/lib/util.sh(functionrun_hook) andscripts/lib/workspace.sh(functionrun_ws_hook). - Commands are executed via
bash -c "$hook_cmd". - Hook definitions (
preCreate,postCreate,preDelete,postDelete) are read from repository-specific files such as.super-worktree.jsonorsuper-worktree.workspace.json. - [CREDENTIALS_UNSAFE]: The skill is explicitly designed to discover and propagate sensitive files across the file system.
- The
copy_sensitive_filesfunction inscripts/lib/sync.shtargets patterns like.env,*.secret,*.key,credentials.json, andauth.json. - The configuration allows for environment variable interpolation in
copyFilespaths, enabling the copying of global secrets such as${HOME}/.aws/credentialsinto project worktrees. - [EXTERNAL_DOWNLOADS]: The script
scripts/validate-skills.shperforms dynamic package installation. - It executes
npm install --silent yaml@^2.8.0to a temporary directory if the package is not already present.
Audit Metadata