worktree-guide
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation, workflow templates, and reference materials for managing Git worktrees.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a pattern where the agent reads metadata from
.ai-context.jsonandREADME.working-tree.mdwithin the user's workspace to calibrate its behavior (e.g., switching between 'main', 'feature', 'bugfix', 'experiment', and 'review' modes). - Ingestion points: Workspace files
.ai-context.jsonandREADME.working-tree.md(referenced inSKILL.mdandreferences/best-practices.md). - Boundary markers: No explicit prompt boundaries or sanitization instructions for the metadata content are provided.
- Capability inventory: The skill is designed to work with Git management tools (
/working-tree:*) and provides guidance for development workflows. - Sanitization: The skill does not provide instructions for sanitizing or validating the contents of the ingested metadata files before the agent processes them.
Audit Metadata