Compétences clean-closed-issue-worktrees

📦

clean-closed-issue-worktrees

Name: clean-closed-issue-worktrees
Author: haoranyu

Révision du contenu r1 Risque élevé 🌐 Accès réseau⚙️ Commandes externes📁 Accès au système de fichiers🔑 Variables d’environnement

Clean Closed-Issue Git Worktrees Safely

Completed issue worktrees consume disk space and leave stale Git registrations. This skill audits candidates and removes only explicitly confirmed targets after safety checks.

Prend en charge: Claude Codex Code(CC)

⚠️ 38 Médiocre

Maintain this Skill? Claim it ⚠️ 38 Médiocre

Arrêtez-vous et demandez confirmation avant l’installation.

Examinez le plan et obtenez le consentement explicite de l’utilisateur avant de modifier des fichiers.

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "clean-closed-issue-worktrees" from https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees.md and its manifest at https://skillstore.io/api/skills/haoranyu-clean-closed-issue-worktrees/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/haoranyu-clean-closed-issue-worktrees.md manifest signé GET /api/skills/haoranyu-clean-closed-issue-worktrees/manifest lockfile signé GET /api/skills/haoranyu-clean-closed-issue-worktrees/lockfile

Tester

Utilisation de « clean-closed-issue-worktrees ». Scan my repository and find worktrees linked to closed issues.

Résultat attendu:

Recommended: /workspace/project-1459, issue 1459 closed, clean, inactive, and retained by a remote branch.
Keep: /workspace/project-1510, issue 1510 remains open.
Needs review: /workspace/project-1402 contains an unapproved ignored environment file.

Utilisation de « clean-closed-issue-worktrees ». Prepare cleanup for the two recommended worktrees and retain branches.

Résultat attendu:

Prepared a two-target plan that retains both branches. Review the exact paths and confirmation identifier before execution.

Utilisation de « clean-closed-issue-worktrees ». Remove the confirmed targets.

Résultat attendu:

Removed both confirmed worktrees, retained their branches, deleted the temporary plan, and reported the estimated reclaimed space.

Audit de sécurité

Risque élevé

v1 • 30/08/2026 Ouvrir le rapport versionné

The static findings are false positives caused by documentation examples, Markdown backticks, safety glob names, and argument-vector subprocess calls. However, execute accepts an editable plan without authenticating its origin and omits several create-plan policy checks, enabling bypass of approval safeguards.

Fichiers analysés

1,201

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (1)

Élevé

scripts/worktree_cleanup.py:688-740

Editable Plan Can Bypass Approval Safeguards

Execution trusts fields from an unauthenticated plan and repeats only selected checks. A modified plan can bypass evidence, ignored-path approval, harness, and current-directory safeguards.

execute_plan loads an editable JSON plan, compares a plan identifier stored in that same file, and calls preflight_plan without rerunning validate_target_for_plan.

Facteurs de risque

🌐 Accès réseau (4)

references/evidence-schema.md:24 references/evidence-schema.md:25 references/evidence-schema.md:33 references/provider-access.md:38

⚙️ Commandes externes (26)

📁 Accès au système de fichiers (6)

scripts/worktree_cleanup.py:22 scripts/worktree_cleanup.py:467 scripts/worktree_cleanup.py:469 scripts/worktree_cleanup.py:474 scripts/worktree_cleanup.py:12 scripts/worktree_cleanup.py:225

🔑 Variables d’environnement (1)

scripts/worktree_cleanup.py:93

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/haoranyu-clean-closed-issue-worktrees/security.svg)](https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/haoranyu-clean-closed-issue-worktrees/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/haoranyu-clean-closed-issue-worktrees.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

haoranyu. (2026). clean-closed-issue-worktrees security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees/audits/1

Citation BibTeX

@techreport{haoranyu-haoranyu-clean-closed-issue-worktrees-2026,
  author = {haoranyu},
  title = {clean-closed-issue-worktrees security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "clean-closed-issue-worktrees security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "haoranyu"
date-released: "2026-08-30"
url: "https://skillstore.io/skills/haoranyu-clean-closed-issue-worktrees/audits/1"
identifiers:
  - type: other
    value: "skillstore:haoranyu-clean-closed-issue-worktrees:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Reclaim Developer Disk Space

Audit old feature worktrees, review exact candidates, and remove approved directories while keeping local branches.

Maintain Shared Build Hosts

Find completed issue worktrees while preserving active, dirty, locked, or uncertain environments.

Close Repository Maintenance Cycles

Verify GitHub or GitLab completion evidence before cleaning branches and worktree registrations.

Essayez ces prompts

Scan Worktrees

Scan the repository at [repository path]. Show every worktree and do not remove anything.

Review Closed-Issue Candidates

Match worktrees in [repository path] to closed items from [GitHub or GitLab URL]. Recommend safe candidates and explain every exclusion.

Prepare a Confirmed Cleanup

Prepare a cleanup plan for [exact paths]. Keep branches, show ignored-path risks, and ask for confirmation before creating the plan.

Plan Advanced Branch Cleanup

Audit [repository path] against [baseline]. Propose backup branches for orphan commits and safe branch deletion only after ancestry verification.

Bonnes pratiques

Run the inventory from outside every possible removal target.
Verify each issue or change through an authoritative provider route immediately before execution.
Keep branches by default and review sensitive or unknown ignored paths explicitly.