jb-worktree
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent and user to install the
wtputility from an external third-party repository (github.com/satococoa/wtp) using Homebrew or Go installation commands.- [COMMAND_EXECUTION]: The skill utilizes thewtp execcommand to run arbitrary commands within worktrees and suggests usingevalfor shell initialization (wtp shell-init). It also manages repository-defined execution hooks through the.wtp.ymlconfiguration file.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection via malicious repository configuration files. * Ingestion points: The agent is instructed to read and act upon.wtp.ymland lockfiles found in the repository root (e.g., inSKILL.mdAgent workflow section). * Boundary markers: No boundary markers or 'ignore' instructions are provided to the agent when processing these external files. * Capability inventory: The skill has the capability to execute shell commands viawtp execand trigger automated hooks viawtp add. * Sanitization: No sanitization or validation of the repository-provided configuration or hooks is performed before execution.
Audit Metadata