wt-switch-create

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute shell commands for the wt CLI and Git. This is necessary for its core functionality of managing worktrees and repository state.
  • Evidence: wt -C <repo> switch --create <branch> --no-cd --format=json and git stash push -u / git stash pop in SKILL.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied arguments such as branch names and repository paths which are used in shell commands. This represents a potential injection surface, though the skill provides a strict grammar to assist the agent in safe parsing.
  • Ingestion points: User-provided arguments defined in the SKILL.md frontmatter and grammar section.
  • Boundary markers: The skill uses a -- token to separate branch/repo arguments from the task description.
  • Capability inventory: The skill uses Bash for command execution and EnterWorktree for session re-rooting.
  • Sanitization: No explicit shell-escaping instructions are provided, relying on the agent's default safety protocols.
  • [DYNAMIC_EXECUTION]: The skill instructs the agent to dynamically construct and execute commands based on runtime feedback, such as retrying a branch creation without the --create flag if the branch already exists.
  • Evidence: Logic in SKILL.md step 3 describes retrying commands based on specific error messages like Branch <branch> already exists.
  • [SAFE]: All external references, such as the wt CLI documentation (worktrunk.dev) and Claude Code documentation (code.claude.com), are to legitimate and relevant development resources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:07 AM
Security Audit — agent-trust-hub — wt-switch-create