code-git-worktrees
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several shell commands to manage the git environment, including
git worktree add,git check-ignore, and automated commits for .gitignore updates. - [COMMAND_EXECUTION]: It automatically invokes build and test tools based on project manifest detection, including
npm test,cargo test,pytest, andgo test. - [EXTERNAL_DOWNLOADS]: The skill triggers external dependency downloads via standard package managers when project manifest files are found, specifically using
npm install,pip install,poetry install,go mod download, andcargo build. - [DATA_EXPOSURE]: The skill reads from
AGENTS.mdto identify user preferences for directory locations, though this is used within a constrained case statement that limits the paths used for worktree creation.
Audit Metadata