attach-agent-worktree

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script executes shell commands including find and tmux to locate worktree directories and attach to terminal sessions. It correctly uses double quotes for variable interpolation to prevent shell splitting and command injection.- [PROMPT_INJECTION]: The skill processes an agent ID argument which is used as a search pattern. While it lacks strict regex validation, it checks for existence and adheres to intended functionality. * Ingestion points: AGENT_ID variable in SKILL.md implementation. * Boundary markers: Absent. * Capability inventory: Directory discovery via find and session attachment via tmux. * Sanitization: Validates that the input is not empty before proceeding.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 09:05 AM