using-git-worktrees

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to manage Git worktrees (git worktree add, git rev-parse) and detect environment state.
  • [COMMAND_EXECUTION]: It performs automated project setup by executing package managers based on detected project files, specifically running npm install, cargo build, pip install, poetry install, and go mod download.
  • [COMMAND_EXECUTION]: The skill executes project test suites (npm test, cargo test, pytest, go test) to verify the integrity of the newly created workspace.
  • [EXTERNAL_DOWNLOADS]: Through the use of standard package managers, the skill triggers downloads of dependencies from official registries (NPM, PyPI, Crates.io, Go Proxy).
  • [SAFE]: The skill implements safety checks, such as verifying that worktree directories are excluded via .gitignore before creation to prevent accidental repository pollution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 02:26 AM
Security Audit — agent-trust-hub — using-git-worktrees