new-workspace
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill performs various shell operations using the
Bashtool, includinggit worktree add,git checkout, andmkdir. These commands are used to manage repository structure and are aligned with the skill's primary purpose. - [EXTERNAL_DOWNLOADS]: In Step 8, the skill executes
uv syncif apyproject.tomlfile is found. This operation downloads and installs project dependencies from the official Python Package Index (PyPI), which is a well-known and trusted service. - [CREDENTIALS_UNSAFE]: The skill provides instructions to symlink
.envfiles from the repository root to new worktrees. While.envfiles often contain sensitive secrets, the skill handles them as part of a standard local development workflow for environment parity across workspaces.
Audit Metadata