using-git-worktrees
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Git and shell commands to facilitate development workflow. * Evidence: The script uses
git rev-parse,mkdir, andgit worktree addto create isolated project environments. * Context: All operations are conducted locally within the user's home directory and existing Git repositories. - [PROMPT_INJECTION]: The skill identifies a potential indirect injection surface from user-provided feature names but includes mitigation steps. * Ingestion points: User-supplied
<feature>name via prompt. * Boundary markers: Not explicitly used in shell snippets. * Capability inventory: Command execution viagitandmkdir. * Sanitization: The skill documentation explicitly instructs the agent to 'normalize to a short dash-cased feature string' before creating the worktree, which prevents shell metacharacter injection.
Audit Metadata