codex-open-worktree
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script to execute local system commands including
gitand the macOSopenutility. - These commands are implemented using
subprocess.runwith argument lists, which prevents shell injection vulnerabilities. - The execution is strictly limited to resolving existing Git worktree paths and focusing the specified desktop application.
- [DATA_EXPOSURE]: The skill accesses local Git metadata and directory paths to list available worktrees.
- Access is confined to the repository context and is necessary for the skill's primary function of workspace management.
- No data is transmitted to external servers or non-whitelisted domains.
Audit Metadata