spawn-worktree-agent

Warn

Audited by Snyk on Jul 22, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs using and defaulting to the --dangerously-skip-permissions flag (a permission-bypass for autonomous workers), which directs the agent to bypass security prompts and thus poses a clear security risk even though it doesn't ask for sudo or to edit system files directly.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 22, 2026, 11:17 PM
Issues
1
Security Audit — snyk — spawn-worktree-agent