Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Git Worktree Ops

并行开发环境管理技能

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 37 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The stated purpose (managing git worktrees for parallel development) matches the kinds of filesystem and git operations described. However, the SKILL.md depends entirely on a script at tools/git_worktree_manager.sh which is not provided in the skill bundle; that missing dependency is an inconsistency (the skill assumes a script will be present in the agent's workspace).
!
Instruction Scope
Runtime instructions are minimal and simply direct the agent to run a local shell script for create/remove/list operations, but they provide no guardrails, argument validation, or description of what the script does. Because the script is not included, the agent's execution will depend on whatever file exists at that path in the environment — potentially arbitrary and unreviewed commands that can modify the repo, filesystem, or remotes.
Install Mechanism
No install spec and no code files are included. This lowers risk from package installs or remote downloads, but increases importance of verifying local scripts the instructions reference.
Credentials
The skill declares no required environment variables, credentials, or config paths — this is proportional to its stated git-worktree purpose. The main issue is the implicit reliance on a local script rather than additional secrets.
Persistence & Privilege
The skill does not request persistent presence (always:false) and does not claim to modify other skills or global agent settings. Autonomous invocation is allowed by default (normal) but does not combine here with other elevated privileges.
What to consider before installing
Before installing or enabling this skill, verify where tools/git_worktree_manager.sh is supposed to come from and inspect its contents. If you intend to use this skill, ensure the script is from a trusted source (for example, the linked GitHub repo) and review it for destructive commands (rm, curl|sh, ssh, git push --force, access to secrets, etc.). Prefer skills that include the scripts they require or that install them from a verifiable release; if you must run a local script, run it in a sandbox or test repository and back up your work beforehand. If you are unsure whether the script exists in your environment, treat the missing-script behavior as a blocking issue until resolved.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk972epvvrn1hwxar01ra7tft2s83jv8c

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🌲 Clawdis

SKILL.md

Git Worktree Ops

本技能用于管理 Antigravity 的并行开发环境。通过 git worktree 创建物理隔离的代码工作区。

核心脚本

使用 tools/git_worktree_manager.sh 进行所有操作。

常用命令

  • 创建: ./tools/git_worktree_manager.sh create <agent-name>
  • 销毁: ./tools/git_worktree_manager.sh remove <agent-name>
  • 列表: ./tools/git_worktree_manager.sh list

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…