issue-worktree-agent
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to manage isolated workspace environments using Git worktrees, which is a standard and safe developer workflow.
- [COMMAND_EXECUTION]: The skill interacts with the system by executing Git commands. Based on the provided unit tests in
tests/test_issue_worktree.py, the underlying implementation usessubprocess.runwith a list of arguments rather than a single string, which is the recommended practice to prevent shell injection vulnerabilities. - [PROMPT_INJECTION]: The instructions provided in
SKILL.mdare clear and functional, with no evidence of attempts to override agent behavior, bypass safety filters, or extract system prompts. - [DATA_EXPOSURE]: No hardcoded secrets, API keys, or access to sensitive local files (like SSH keys or AWS credentials) were found in the skill's instructions or test scripts.
Audit Metadata