attach-agent-worktree
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script executes shell commands including
findandtmuxto locate worktree directories and attach to terminal sessions. It correctly uses double quotes for variable interpolation to prevent shell splitting and command injection.- [PROMPT_INJECTION]: The skill processes an agent ID argument which is used as a search pattern. While it lacks strict regex validation, it checks for existence and adheres to intended functionality. * Ingestion points:AGENT_IDvariable in SKILL.md implementation. * Boundary markers: Absent. * Capability inventory: Directory discovery viafindand session attachment viatmux. * Sanitization: Validates that the input is not empty before proceeding.
Audit Metadata