The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/worktree-manager.sh executes various Git and shell commands to manage the repository state. This includes creating and removing worktree directories, checking out branches, and managing local file system structures.
[CREDENTIALS_UNSAFE]: The skill's copy_env_files function in scripts/worktree-manager.sh is designed to identify and copy files matching the .env* pattern from the main repository into newly created worktrees. As these files are standard locations for storing sensitive credentials and API keys, this behavior involves automated access to sensitive local data.
[PROMPT_INJECTION]: The skill processes branch names provided by the user to determine the location and identity of new worktrees, which presents a surface for indirect prompt injection.
Ingestion points: User-provided branch names and base branch arguments passed to the create_worktree function in scripts/worktree-manager.sh.
Boundary markers: Absent. The script interpolates user input directly into shell commands and file paths without using specific delimiters or safety instructions.
Capability inventory: The script has the capability to modify the local file system (mkdir, cp, rmdir) and alter the Git repository structure.
Sanitization: The script utilizes standard shell quoting for variables, but does not perform content validation or sanitization on the input strings to prevent malicious naming patterns.
[EXTERNAL_DOWNLOADS]: The create_worktree command performs a git pull from the repository's configured origin to synchronize the local state with the remote version.

git-worktree