code-git-worktrees

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several shell commands to manage the git environment, including git worktree add, git check-ignore, and automated commits for .gitignore updates.
  • [COMMAND_EXECUTION]: It automatically invokes build and test tools based on project manifest detection, including npm test, cargo test, pytest, and go test.
  • [EXTERNAL_DOWNLOADS]: The skill triggers external dependency downloads via standard package managers when project manifest files are found, specifically using npm install, pip install, poetry install, go mod download, and cargo build.
  • [DATA_EXPOSURE]: The skill reads from AGENTS.md to identify user preferences for directory locations, though this is used within a constrained case statement that limits the paths used for worktree creation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 08:00 AM
Security Audit — agent-trust-hub — code-git-worktrees