cleanup-worktree

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to manage Git repositories.
  • Evidence: Commands include git worktree list, git fetch origin, git branch --merged, and git worktree remove.
  • These are standard operations for the tool's stated purpose of repository maintenance.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data (branch names and file paths) that could theoretically contain malicious instructions if the local repository is compromised.
  • Ingestion points: Output from git worktree list and user-provided branch names.
  • Boundary markers: None specified to isolate branch/path strings.
  • Capability inventory: Shell command execution via git CLI (SKILL.md).
  • Sanitization: No explicit validation or escaping of the branch names or paths before interpolation into shell commands.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 11:49 PM