using-git-worktrees

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands to manage Git worktrees (git worktree add), identify project top-level directories, and check for existing files and configurations.\n- [COMMAND_EXECUTION]: Automated execution of standard development lifecycle tools including npm, cargo, pip, poetry, and go for environment setup and project verification (tests).\n- [EXTERNAL_DOWNLOADS]: Fetches project dependencies using well-known package managers (e.g., npm, pip, cargo) from official, trusted registries during the isolated workspace setup phase.\n- [PROMPT_INJECTION]: The skill reads from local project files (e.g., .cursorrules, CLAUDE.md) to determine directory preferences, which represents a potential surface for indirect prompt injection; however, the skill uses specific grep patterns and provides manual overrides which mitigate this risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 12:35 PM