discard
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Bash and PowerShell scripts that act as wrappers for a Node.js utility. These scripts are implemented using secure argument-passing techniques (Bash arrays and PowerShell splatting) to prevent command injection vulnerabilities.\n- [SAFE]: No malicious patterns, such as prompt injection, data exfiltration, or persistence mechanisms, were found. The skill's behavior is consistent with its stated purpose of managing local git worktrees.
Audit Metadata