create-worktree

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes git commands (e.g., git rev-parse, git worktree, git fetch) and repository-local scripts (e.g., bin/worktree-add, bin/worktree-up) to manage worktrees. This is standard functionality for a developer-oriented skill and leverages the local environment's tooling.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided branch names and PR numbers, which are interpolated into shell commands. It uses sanitization logic (slugification) to create directory names, which reduces the risk of malicious input affecting the file system structure. The operations are appropriately scoped to git and local workspace management tasks.
  • Ingestion points: Branch names and PR numbers from user input or the harness interface.
  • Boundary markers: None explicitly defined in the instructions.
  • Capability inventory: Shell execution of git commands, directory creation (mkdir), and execution of local repository scripts (bin/*).
  • Sanitization: Slugification of branch names using the tr command to ensure directory paths contain only alphanumeric characters and hyphens.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:47 PM