worktrunk
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPERSISTENCECOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation guide includes instructions to download the
worktrunkbinary from its official GitHub releases page. The process includes a security-conscious step to verify the download's integrity using a SHA256 checksum before execution or installation. - [PERSISTENCE]: The skill describes the
wt config shell installcommand, which modifies user shell profiles (e.g.,.bashrc,.zshrc) to enable directory switching functionality. The instructions specifically caution the agent to propose this change and not run it without explicit user permission. - [COMMAND_EXECUTION]: The Worktrunk tool supports a hook system (e.g.,
pre-start,pre-merge) that executes arbitrary project-level shell commands. The documentation emphasizes the tool's built-in security features, such as mandatory approval prompts for hook changes, and advises agents to review these commands with the user before using bypass flags like--yes.
Audit Metadata