cleanup-worktree
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to manage Git repositories.
- Evidence: Commands include
git worktree list,git fetch origin,git branch --merged, andgit worktree remove. - These are standard operations for the tool's stated purpose of repository maintenance.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (branch names and file paths) that could theoretically contain malicious instructions if the local repository is compromised.
- Ingestion points: Output from
git worktree listand user-provided branch names. - Boundary markers: None specified to isolate branch/path strings.
- Capability inventory: Shell command execution via
gitCLI (SKILL.md). - Sanitization: No explicit validation or escaping of the branch names or paths before interpolation into shell commands.
Audit Metadata