git-worktree-workflow

Warn

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to request required_permissions: ["all"] for multiple operations. This is a high-privilege request that bypasses standard agent sandbox restrictions to allow filesystem access outside the project root.
  • [COMMAND_EXECUTION]: Executes shell commands to extract local environment data, including repository remote URLs via git remote get-url origin and the user's name via git config user.name.
  • [COMMAND_EXECUTION]: Performs recursive directory copying (cp -r) of sensitive configuration folders (.cursor/rules, .cursor/skills) to user-defined paths outside the workspace.
  • [COMMAND_EXECUTION]: Modifies the filesystem by creating and writing a config.json file to global or local skill directories (e.g., ~/.cursor/skills/git-worktree-workflow/config.json).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 22, 2026, 03:04 AM
Security Audit — agent-trust-hub — git-worktree-workflow