cleanup-github-worktree

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local PowerShell and Bash scripts (cleanup-worktree.ps1 and cleanup-worktree.sh) to query Git status using standard commands like git worktree list and git log. These scripts are used solely for identifying candidate branches based on their last commit timestamp or directory modification time.
  • [COMMAND_EXECUTION]: The skill performs shell commands to check the current branch (git branch --show-current) ensuring the operation starts from a safe state (master).
  • [USER_CONFIRMATION]: The workflow includes two mandatory user interaction points: selecting the cleanup threshold (Step 1) and confirming the list of identified stale worktrees before any destructive action is taken (Step 3).
  • [DATA_FLOW]: The skill uses local repository metadata only. No data is sent to external servers, and it does not handle sensitive credentials like API keys or SSH secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 06:40 AM
Security Audit — agent-trust-hub — cleanup-github-worktree