git-worktree-workflow
Warn
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to request
required_permissions: ["all"]for multiple operations. This is a high-privilege request that bypasses standard agent sandbox restrictions to allow filesystem access outside the project root. - [COMMAND_EXECUTION]: Executes shell commands to extract local environment data, including repository remote URLs via
git remote get-url originand the user's name viagit config user.name. - [COMMAND_EXECUTION]: Performs recursive directory copying (
cp -r) of sensitive configuration folders (.cursor/rules,.cursor/skills) to user-defined paths outside the workspace. - [COMMAND_EXECUTION]: Modifies the filesystem by creating and writing a
config.jsonfile to global or local skill directories (e.g.,~/.cursor/skills/git-worktree-workflow/config.json).
Audit Metadata