git-worktree
Fail
Audited by Socket on Mar 10, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
The skill is coherently aligned with its stated purpose of managing Git worktrees via a single manager script. It avoids unverified external downloads and keeps operations local to the developer's machine. The primary security considerations relate to the intentional copying of environment files (.env*) into new worktrees, which increases the potential exposure surface for secrets if worktrees are accessed in insecure contexts or shared systems. Overall, the footprint is benign and proportional to its purpose, with a moderate concern around handling of environment files that may contain sensitive data.
Confidence: 98%Severity: 25%
Audit Metadata