The Agent Skills Directory

[SAFE]: The skill implements a robust workflow for Git worktree management with several security-conscious features.
Safety Verification: It strictly enforces a check to ensure project-local worktree directories are ignored by Git (git check-ignore) before creation, preventing accidental exposure or commitment of worktree contents.
Secure Dependency Management: When setting up Node.js environments, it uses npm ci --ignore-scripts, which is a recognized security best practice to prevent the execution of potentially malicious post-install scripts from third-party packages.
Explicit User Interaction: The skill defaults to checking existing configurations or asking the user for directory preferences rather than making arbitrary filesystem changes.
Baseline Testing: It mandates running project tests to verify a clean state, which helps identify pre-existing issues before implementation begins.
[REMOTE_CODE_EXECUTION]: The skill uses package managers to install dependencies and run tests. While this involves downloading and executing code from external registries (NPM, PyPI, Cargo, Go), these are standard development operations targeting well-known services and repositories. The skill mitigates risks by recommending locked dependencies and using security flags like --ignore-scripts.
[INDIRECT_PROMPT_INJECTION]: The skill processes project-local files like CLAUDE.md and various build manifests to automate setup and testing. This represents a potential surface for indirect injection if project files are malicious.
Ingestion points: Project configuration files (CLAUDE.md, package.json, Cargo.toml, requirements.txt, pyproject.toml, go.mod) are read to determine setup steps.
Boundary markers: The skill relies on standard file structures and does not implement specific delimiters for the content of these files.
Capability inventory: Access to shell commands for git operations, package managers, and test runners.
Sanitization: Mitigation is provided by using the --ignore-scripts flag during Node.js package installation to limit side effects from untrusted dependency code.

using-git-worktrees