{"data":{"skill":{"slug":"zhanlincui-using-git-worktrees","name":"using-git-worktrees","icon":"📦","repo":"https://github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/using-git-worktrees","status":"approved","author":"ZhanlinCui","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"a676a20c-70dd-4d33-a864-cdcde8ddaee9","skill_id":"e162dd7f-02e0-42d4-8d7e-275c05b99196","version":2,"content_hash":"93981ee94620a8725b2af4a2908dee38","risk_level":"medium","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"The static findings are mostly false positives from Markdown shell examples and literal path documentation. The skill is legitimate Git workflow guidance, but it instructs agents to run dependency installers, builds, tests, create worktrees, edit .gitignore, and commit changes, so marketplace publication should include a warning about command execution and repository modification.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":57,"line_start":49},{"file":"SKILL.md","line_end":60,"line_start":57},{"file":"SKILL.md","line_end":99,"line_start":60},{"file":"SKILL.md","line_end":118,"line_start":101},{"file":"SKILL.md","line_end":124,"line_start":118},{"file":"SKILL.md","line_end":130,"line_start":124},{"file":"SKILL.md","line_end":192,"line_start":180}]},{"factor":"filesystem","evidence":[{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":71,"line_start":71},{"file":"SKILL.md","line_end":91,"line_start":91},{"file":"SKILL.md","line_end":92,"line_start":92},{"file":"SKILL.md","line_end":189,"line_start":189},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":25,"line_start":25},{"file":"SKILL.md","line_end":33,"line_start":33},{"file":"SKILL.md","line_end":59,"line_start":59}]}],"critical_findings":[],"high_findings":[],"medium_findings":[{"title":"Automatic Project Command Execution","locations":[{"file":"SKILL.md","line_end":130,"line_start":101}],"confidence":0.86,"description":"The skill instructs agents to run package installation, build, and test commands after creating a worktree. These are normal developer workflow commands, but commands such as npm install and project tests may execute repository-controlled scripts.","confidence_reasoning":"The commands are explicitly documented and relevant to the skill purpose. The risk comes from running project-controlled setup and test hooks, not from malicious code in this skill."},{"title":"Repository Modification Workflow","locations":[{"file":"SKILL.md","line_end":67,"line_start":62}],"confidence":0.79,"description":"The skill tells agents to add an ignore rule and commit it when a project-local worktree directory is not ignored. This is a legitimate safety step, but it changes repository state and should be confirmed in sensitive repositories.","confidence_reasoning":"The file clearly instructs repository modification and committing. The action is transparent and safety-oriented, so the concern is operational rather than malicious."}],"low_findings":[{"title":"Static Shell Pattern Findings Are Documentation Examples","locations":[{"file":"SKILL.md","line_end":34,"line_start":22},{"file":"SKILL.md","line_end":81,"line_start":79},{"file":"SKILL.md","line_end":192,"line_start":180}],"confidence":0.92,"description":"The analyzer reported Ruby backtick execution, shell substitution, and template substitution across Markdown examples. These lines are fenced examples for Git worktree setup, not executable skill code, and most are false positives.","confidence_reasoning":"The referenced content is Markdown guidance and examples. No Ruby source file or hidden executable wrapper is present in the reviewed file."},{"title":"Hidden Path References Are Worktree Locations","locations":[{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":71,"line_start":71},{"file":"SKILL.md","line_end":92,"line_start":91}],"confidence":0.9,"description":"The analyzer flagged .worktrees and ~/.config paths as hidden file access. The references document possible worktree directories and do not access secrets or sensitive hidden files.","confidence_reasoning":"The paths are shown as workspace destinations. I found no evidence of reading credentials, shell profiles, SSH keys, or other sensitive hidden files."},{"title":"Weak Cryptography Findings Are False Positives","locations":[{"file":"SKILL.md","line_end":3,"line_start":3},{"file":"SKILL.md","line_end":212,"line_start":212}],"confidence":0.95,"description":"The analyzer reported weak cryptographic algorithm blockers at the description and integration lines. I found no cryptographic operation, hash selection, encryption routine, or credential handling in those lines.","confidence_reasoning":"The cited lines contain natural language about using the skill and another skill name. No evidence found for MD5, SHA-1, DES, RC4, or another weak crypto primitive."}],"dangerous_patterns":[{"title":"Package Installers and Build Commands","locations":[{"file":"SKILL.md","line_end":118,"line_start":105}],"confidence":0.88,"description":"The setup section lists npm install, cargo build, pip install, poetry install, and go mod download. These commands may execute dependency hooks or repository build logic.","confidence_reasoning":"The commands are plainly present and can execute project-controlled code in common ecosystems. The surrounding guidance indicates legitimate setup intent."},{"title":"Git Worktree Creation and Directory Change","locations":[{"file":"SKILL.md","line_end":99,"line_start":96}],"confidence":0.83,"description":"The creation step runs git worktree add with a branch name and then changes into the new path. This is expected for the skill but affects the filesystem and working directory.","confidence_reasoning":"The command is directly documented and matches the declared feature. The risk is bounded to normal Git and filesystem side effects."}],"files_scanned":1,"total_lines":218,"audit_model":"codex","audited_at":"2026-07-01T03:44:38.126+00:00","created_at":"2026-07-01T04:01:07.207131+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":4,"needsReviewCount":0,"falsePositiveCount":1,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}