git-worktree-manager
Audited by Socket on Feb 21, 2026
1 alert found:
Malware[Skill Scanner] Destructive bash command detected (rm -rf, chmod 777) All findings: [CRITICAL] command_injection: Destructive bash command detected (rm -rf, chmod 777) (CI004) [AITech 9.1.4] [CRITICAL] command_injection: Destructive bash command detected (rm -rf, chmod 777) (CI004) [AITech 9.1.4] [CRITICAL] command_injection: Destructive bash command detected (rm -rf, chmod 777) (CI004) [AITech 9.1.4] BENIGN: The content is a comprehensive documentation guide for Git worktree management with consistent scope and no code that performs data reads/writes, network calls, or credential handling. It does not introduce unexpected capabilities or risky data flows. LLM verification: This skill is documentation for git worktree management and is functionally consistent with its stated purpose. I did not find code that intentionally exfiltrates data, installs remote payloads, or performs stealthy malicious actions. However, multiple examples include unguarded destructive commands (rm -rf, git worktree remove --force) and broad removal loops that pose an accidental data-loss risk. Treat the examples as potentially dangerous to copy-paste without reviewing paths and adding safe