using-git-worktrees
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to manage Git worktrees (
git worktree add), identify project top-level directories, and check for existing files and configurations.\n- [COMMAND_EXECUTION]: Automated execution of standard development lifecycle tools includingnpm,cargo,pip,poetry, andgofor environment setup and project verification (tests).\n- [EXTERNAL_DOWNLOADS]: Fetches project dependencies using well-known package managers (e.g., npm, pip, cargo) from official, trusted registries during the isolated workspace setup phase.\n- [PROMPT_INJECTION]: The skill reads from local project files (e.g.,.cursorrules,CLAUDE.md) to determine directory preferences, which represents a potential surface for indirect prompt injection; however, the skill uses specificgreppatterns and provides manual overrides which mitigate this risk.
Audit Metadata