setup-worktree
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands such as
git worktree list,cp, andpnpm build:server. These are standard development operations used for the stated purpose of configuring a local environment. - [DATA_EXPOSURE]: The skill accesses and copies
.envfiles between local directories. While.envfiles often contain sensitive information, the operation is a local copy intended for project configuration and does not involve network transmission. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the output of the
git worktree listcommand. This creates a minimal attack surface for indirect prompt injection, but the source is a trusted local system tool. - Ingestion points: Output of
git worktree listinSKILL.md. - Boundary markers: None.
- Capability inventory: File copy (
cp), build script execution (pnpm). - Sanitization: None.
Audit Metadata