using-git-worktrees
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to manage Git worktrees (
git worktree add) and project environments. It detects project files (package.json,Cargo.toml,requirements.txt, etc.) and executes corresponding package manager commands (npm install,cargo build,pip install,poetry install,go mod download) and test suites (npm test,pytest, etc.).\n- [INDIRECT_PROMPT_INJECTION]: The skill reads from local configuration files to determine its execution environment, creating a potential surface for indirect influence.\n - Ingestion points: Files like
CLAUDE.mdand project manifest files are parsed for directory preferences and build instructions.\n - Boundary markers: None.\n
- Capability inventory: Execution of shell commands and modification of
.gitignore.\n - Sanitization: Path selection logic is protected by a shell
casestatement that validates inputs against expected patterns before constructing the workspace path.
Audit Metadata