using-git-worktrees

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [Command Execution]: The skill uses shell commands (git, ls, cd) to detect the current repository state and manage worktrees. These are standard Git operations for the task of isolating workspaces.
  • [Project Setup & External Downloads]: The skill automatically detects and runs package managers (npm install, pip install, cargo build, poetry install, go mod download) based on the files present in the repository. This involves downloading dependencies from standard, well-known registries (NPM, PyPI, Crates.io, Go Proxy).
  • [Baseline Verification]: The skill executes project-specific test commands (npm test, pytest, cargo test, go test) to ensure the workspace is in a clean state before work begins. This is a common development best practice.
  • [Workspace Isolation & Safety]: The skill includes checks to prevent nested worktrees and ensures that worktree directories are added to .gitignore to prevent accidental tracking of sensitive or temporary files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 10:51 AM
Security Audit — agent-trust-hub — using-git-worktrees