wt-switch-create
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute shell commands for thewtCLI and Git. This is necessary for its core functionality of managing worktrees and repository state. - Evidence:
wt -C <repo> switch --create <branch> --no-cd --format=jsonandgit stash push -u/git stash popinSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied arguments such as branch names and repository paths which are used in shell commands. This represents a potential injection surface, though the skill provides a strict grammar to assist the agent in safe parsing.
- Ingestion points: User-provided arguments defined in the
SKILL.mdfrontmatter and grammar section. - Boundary markers: The skill uses a
--token to separate branch/repo arguments from the task description. - Capability inventory: The skill uses
Bashfor command execution andEnterWorktreefor session re-rooting. - Sanitization: No explicit shell-escaping instructions are provided, relying on the agent's default safety protocols.
- [DYNAMIC_EXECUTION]: The skill instructs the agent to dynamically construct and execute commands based on runtime feedback, such as retrying a branch creation without the
--createflag if the branch already exists. - Evidence: Logic in
SKILL.mdstep 3 describes retrying commands based on specific error messages likeBranch <branch> already exists. - [SAFE]: All external references, such as the
wtCLI documentation (worktrunk.dev) and Claude Code documentation (code.claude.com), are to legitimate and relevant development resources.
Audit Metadata