worktree-manage
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
lazyworktreeCLI to execute shell commands within specific git worktrees. This includes running build scripts (e.g.,make build) or package managers (e.g.,npm install) through theexecandcreate --execflags. This functionality is intended for local development workflows.\n- [PROMPT_INJECTION]: The skill processes user-supplied data such as pull request numbers, issue numbers, and branch names to automate worktree setup. While this interaction with external identifiers represents a surface for indirect prompt injection, the skill specifically notes that the underlying CLI tool performs sanitization on worktree names.
Audit Metadata