git-worktree-workflows

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of shell commands to manage Git worktrees and the gw CLI tool. These commands are descriptive and intended for the user or agent to execute locally to manage repository state.
  • [EXTERNAL_DOWNLOADS]: The skill documentation describes installing the gw tool via npx from the author's GitHub repository. It also references using the GitHub CLI (gh) for PR management. These are standard external resources for developer-oriented skills.
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions for shell integration using eval "$(gw install-shell)". This is a standard but sensitive pattern used to enable terminal-based features like directory jumping. It also contains examples of using deno run --allow-all for development aliases, which is a high-privilege but standard practice for local script execution during development.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 06:35 PM
Security Audit — agent-trust-hub — git-worktree-workflows