worktree-manage

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the lazyworktree CLI to execute shell commands within specific git worktrees. This includes running build scripts (e.g., make build) or package managers (e.g., npm install) through the exec and create --exec flags. This functionality is intended for local development workflows.\n- [PROMPT_INJECTION]: The skill processes user-supplied data such as pull request numbers, issue numbers, and branch names to automate worktree setup. While this interaction with external identifiers represents a surface for indirect prompt injection, the skill specifically notes that the underlying CLI tool performs sanitization on worktree names.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 12:48 AM