using-git-worktrees
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development commands to initialize workspaces and install dependencies based on detected project files. These include
git worktree,npm install,cargo build,pip install, andgo mod download. These commands are appropriate for the skill's stated purpose of workspace isolation and project setup. - [DATA_EXPOSURE]: The skill uses
git rev-parseand other git commands to inspect the repository state (Step 0). This is used for environment detection and does not involve exfiltrating data to external sources. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect injection (Category 8) as it runs setup and test commands based on the contents of the repository (
package.json,Cargo.toml, etc.). However, this is inherent to development tools, and the skill includes verification steps (Step 3) to check for a clean baseline before proceeding.
Audit Metadata