git-worktree
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash script to automate Git and file system operations.
- Evidence: The
worktree-manager.shscript executesgit worktree,git checkout,git pull,mkdir, andcp. - Context: These operations are standard for development environment management and are scoped to the local repository directory.
- [SAFE]: No malicious patterns, obfuscation, or data exfiltration vectors were detected.
- Analysis: The skill operates entirely on the local file system and does not perform any network requests. The automatic copying of
.envfiles is a documented productivity feature for local development parity and does not involve sending credentials to external targets.
Audit Metadata