Git Worktree Ops

PassAudited by ClawScan on May 10, 2026.

Overview

This is a small Git worktree management skill, but it depends on a local helper script that was not included in the reviewed artifacts.

This skill appears benign for managing Git worktrees. Before installing or invoking it, check the referenced tools/git_worktree_manager.sh script yourself because it was not included in the reviewed package, and be careful with the remove command because it can delete a local worktree.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If an agent runs a local script at that path, the actual behavior depends on code outside this reviewed skill package.

Why it was flagged

The skill depends on a helper script, but the supplied manifest contains only SKILL.md and no install spec or script file, so the helper's behavior cannot be reviewed from these artifacts.

Skill content
使用 `tools/git_worktree_manager.sh` 进行所有操作。
Recommendation

Before using it, verify that tools/git_worktree_manager.sh exists, is trusted, and only performs the expected git worktree operations.

What this means

A mistaken or overly broad remove operation could delete a worktree directory or disrupt local development work.

Why it was flagged

The documented commands invoke a local shell helper to create, list, and remove git worktrees. This is aligned with the skill purpose, but the remove operation can affect local workspace contents.

Skill content
创建: `./tools/git_worktree_manager.sh create <agent-name>`
- 销毁: `./tools/git_worktree_manager.sh remove <agent-name>`
- 列表: `./tools/git_worktree_manager.sh list`
Recommendation

Use the remove command only for a clearly identified worktree and review the target before allowing the agent to execute it.