using-git-worktrees

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Command Execution: The skill executes shell commands to perform repository operations, such as creating Git worktrees and modifying project configuration files like .gitignore. These actions are necessary for establishing the isolated development environments the skill is designed to provide.
  • Automated Project Setup: Upon creating a new worktree, the skill identifies the project type and runs standard setup commands like npm install, pip install, or cargo build. This pattern involves downloading dependencies from public registries to ensure the isolated workspace is functional and ready for development.
  • Baseline Verification: The skill automatically executes the project's test suite (e.g., npm test, pytest) to confirm a clean state before development begins. This process executes code defined within the project repository, which is a common practice for verifying environment integrity.
  • Environment Integration: It retrieves metadata from the local Git environment, such as branch names and repository paths, to configure the worktree. This allows the skill to dynamically adapt its behavior to the specific project and branch context.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 02:17 PM
Security Audit — agent-trust-hub — using-git-worktrees