operations-worktree
Warn
Audited by Socket on Oct 3, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s stated purpose is coherent with Git/worktree management, and there is no clear credential exfiltration or covert behavior in the text. However, it depends on a mandatory external `gwt` wrapper whose exact identity and official distribution cannot be verified from the skill, while the referenced command set does not match clearly documented public `gwt` tools. Under the required scoring rules, this unverifiable required CLI makes the skill high security risk even without confirmed malicious intent.
Confidence: 84%Severity: 78%
Audit Metadata