git-worktree-manager
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions involve executing local shell commands to manage Git worktrees and run accompanying Python scripts (
scripts/worktree_manager.pyandscripts/worktree_cleanup.py) for repository orchestration. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of external dependencies when the
--install-depsflag is used, which triggers standard package managers to fetch content from official registries. - [SAFE]: The skill automates the transfer of local environment configurations by copying
.envfiles from the main repository to new worktree directories. This operation is confined to the local filesystem and follows common development environment setup patterns. - [SAFE]: An attack surface for indirect prompt injection exists through the processing of repository-supplied data such as branch names and configuration files.
- Ingestion points: Git branch names, repository directory paths, and user-managed JSON configuration files.
- Boundary markers: No explicit delimiters are specified for separating untrusted data from the script commands.
- Capability inventory: The skill utilizes filesystem access (read/write/delete) and shell command execution for repository management.
- Sanitization: Instructions do not explicitly define sanitization routines for Git identifiers or file content, assuming a trusted local repository context.
Audit Metadata