Habilidades clean-closed-issue-worktrees

📦

clean-closed-issue-worktrees

Name: clean-closed-issue-worktrees
Author: haoranyu

Revisión del contenido r1 Riesgo alto 🌐 Acceso a red⚙️ Comandos externos📁 Acceso al sistema de archivos🔑 Variables de entorno

Clean Closed-Issue Git Worktrees Safely

Completed issue worktrees consume disk space and leave stale Git registrations. This skill audits candidates and removes only explicitly confirmed targets after safety checks.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "clean-closed-issue-worktrees" from https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees.md and its manifest at https://skillstore.io/api/skills/haoranyu-clean-closed-issue-worktrees/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/haoranyu-clean-closed-issue-worktrees.md Manifest firmado GET /api/skills/haoranyu-clean-closed-issue-worktrees/manifest Lockfile firmado GET /api/skills/haoranyu-clean-closed-issue-worktrees/lockfile

Pruébalo

Usando "clean-closed-issue-worktrees". Scan my repository and find worktrees linked to closed issues.

Resultado esperado:

Recommended: /workspace/project-1459, issue 1459 closed, clean, inactive, and retained by a remote branch.
Keep: /workspace/project-1510, issue 1510 remains open.
Needs review: /workspace/project-1402 contains an unapproved ignored environment file.

Usando "clean-closed-issue-worktrees". Prepare cleanup for the two recommended worktrees and retain branches.

Resultado esperado:

Prepared a two-target plan that retains both branches. Review the exact paths and confirmation identifier before execution.

Usando "clean-closed-issue-worktrees". Remove the confirmed targets.

Resultado esperado:

Removed both confirmed worktrees, retained their branches, deleted the temporary plan, and reported the estimated reclaimed space.

Auditoría de seguridad

Riesgo alto

v1 • 30/8/2026 Abrir el informe versionado

The static findings are false positives caused by documentation examples, Markdown backticks, safety glob names, and argument-vector subprocess calls. However, execute accepts an editable plan without authenticating its origin and omits several create-plan policy checks, enabling bypass of approval safeguards.

Archivos escaneados

1,201

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Alto

scripts/worktree_cleanup.py:688-740

Editable Plan Can Bypass Approval Safeguards

Execution trusts fields from an unauthenticated plan and repeats only selected checks. A modified plan can bypass evidence, ignored-path approval, harness, and current-directory safeguards.

execute_plan loads an editable JSON plan, compares a plan identifier stored in that same file, and calls preflight_plan without rerunning validate_target_for_plan.

Factores de riesgo

🌐 Acceso a red (4)

references/evidence-schema.md:24 references/evidence-schema.md:25 references/evidence-schema.md:33 references/provider-access.md:38

⚙️ Comandos externos (26)

📁 Acceso al sistema de archivos (6)

scripts/worktree_cleanup.py:22 scripts/worktree_cleanup.py:467 scripts/worktree_cleanup.py:469 scripts/worktree_cleanup.py:474 scripts/worktree_cleanup.py:12 scripts/worktree_cleanup.py:225

🔑 Variables de entorno (1)

scripts/worktree_cleanup.py:93

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/haoranyu-clean-closed-issue-worktrees/security.svg)](https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/haoranyu-clean-closed-issue-worktrees/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/haoranyu-clean-closed-issue-worktrees.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

haoranyu. (2026). clean-closed-issue-worktrees security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees/audits/1

Cita BibTeX

@techreport{haoranyu-haoranyu-clean-closed-issue-worktrees-2026,
  author = {haoranyu},
  title = {clean-closed-issue-worktrees security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "clean-closed-issue-worktrees security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "haoranyu"
date-released: "2026-08-30"
url: "https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees/audits/1"
identifiers:
  - type: other
    value: "skillstore:haoranyu-clean-closed-issue-worktrees:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Reclaim Developer Disk Space

Audit old feature worktrees, review exact candidates, and remove approved directories while keeping local branches.

Maintain Shared Build Hosts

Find completed issue worktrees while preserving active, dirty, locked, or uncertain environments.

Close Repository Maintenance Cycles

Verify GitHub or GitLab completion evidence before cleaning branches and worktree registrations.

Prueba estos prompts

Scan Worktrees

Scan the repository at [repository path]. Show every worktree and do not remove anything.

Review Closed-Issue Candidates

Match worktrees in [repository path] to closed items from [GitHub or GitLab URL]. Recommend safe candidates and explain every exclusion.

Prepare a Confirmed Cleanup

Prepare a cleanup plan for [exact paths]. Keep branches, show ignored-path risks, and ask for confirmation before creating the plan.

Plan Advanced Branch Cleanup

Audit [repository path] against [baseline]. Propose backup branches for orphan commits and safe branch deletion only after ancestry verification.

Mejores prácticas

Run the inventory from outside every possible removal target.
Verify each issue or change through an authoritative provider route immediately before execution.
Keep branches by default and review sensitive or unknown ignored paths explicitly.