worktree
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard local commands such as
git,cd, anddirnameto facilitate repository management tasks. These operations are restricted to the local environment and the user's repository scope. - [PROMPT_INJECTION]: Indirect surface analysis:
- Ingestion points: Data enters the context via
git worktree list --porcelainandgit show-refas described inSKILL.md. - Boundary markers: There are no explicit instructions to ignore prompt-like content within git output.
- Capability inventory: The skill has the capability to execute
gitsubcommands and navigate the local filesystem. - Sanitization: The skill implements specific sanitization logic for directory 'slugs' to prevent the use of invalid or dangerous characters in the filesystem, although it relies on standard AI processing for repository-provided data such as branch names.
Audit Metadata