Skills create-git-worktree

📦

create-git-worktree

Name: create-git-worktree
Author: AKABANAKK

Content revision r1 High Risk ⚙️ External commands📁 Filesystem access

Create Git Worktrees for Isolated Tasks

Developers need isolated branches without copying repositories manually. This skill creates or reuses a Git worktree and prepares a basic local environment.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "create-git-worktree" from https://skillstore.io/skills/akabanakk-create-git-worktree.md and its manifest at https://skillstore.io/api/skills/akabanakk-create-git-worktree/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/akabanakk-create-git-worktree.md Signed manifest GET /api/skills/akabanakk-create-git-worktree/manifest Signed lockfile GET /api/skills/akabanakk-create-git-worktree/lockfile

Test it

Using "create-git-worktree". Create a worktree for feature/profile-page.

Expected outcome:

Reports the selected base branch.
Creates or reuses a sibling worktree directory.
Shows the next directory to open.

Using "create-git-worktree". Create bugfix/login-timeout from main.

Expected outcome:

Confirms main as the base branch, updates the checkout, creates the worktree, and notes whether .env was copied.

Using "create-git-worktree". Run it for a branch that already has a worktree.

Expected outcome:

Reports that the worktree already exists and gives the existing path.

Security Audit

High Risk

v8 • 7/5/2026 Open versioned report

Most shell and SKILL.md entropy detections are benign for a Git worktree helper. The script still has real risk because it creates sibling directories, changes and pulls the base branch, and copies .env into the new worktree. No prompt injection or malicious exfiltration intent was found.

Files scanned

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (4)

High

scripts/create-worktree.sh:67

Environment file access

if [ -f .env ]; then

The script checks for .env specifically before copying it on the next line. This confirms intentional handling of a sensitive environment file.

High

scripts/create-worktree.sh:68

Environment file access

cp .env "$WORKTREE_PATH/.env"

The script directly copies .env to the worktree. This can duplicate credentials or local secrets into another working directory.

High

SKILL.md:3

Environment file access

description: git worktree を利用した分離作業環境を自動構築します。デフォルトブランチから最新コードを取得し、.git-worktrees/ ディレクトリに新規worktree

The skill description explicitly advertises automatic .env setup, and the script implements .env copying. This is real sensitive-file behavior.

Medium

scripts/create-worktree.sh:45-46

Repository State Mutation Without Confirmation

The script switches to the base branch and runs git pull before creating a worktree. This can modify local repository state without a prompt.

The checkout and pull commands are direct and unconditional after argument parsing. This is clear repository mutation, although it matches the skill purpose.

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

scripts/create-worktree.sh:33

Path traversal sequence

WORKTREE_PATH="$REPO_ROOT/../${REPO_NAME}-worktrees/$WORKTREE_NAME"

The worktree path intentionally uses REPO_ROOT/.. and writes to a sibling directory outside the repository. This expands filesystem scope beyond the current project.

High

scripts/create-worktree.sh:48

Path traversal sequence

mkdir -p "$REPO_ROOT/../${REPO_NAME}-worktrees"

mkdir -p creates the sibling worktrees directory through REPO_ROOT/.. without resolving or constraining the final path. This is a real filesystem boundary risk.

High

scripts/create-worktree.sh:68

Hidden file access

cp .env "$WORKTREE_PATH/.env"

The script copies .env into the new worktree. Hidden environment files often contain secrets and should not be duplicated automatically.

Medium

scripts/create-worktree.sh:1

Unix shell invocation

#!/bin/bash

The file is a Bash script that performs local Git, mkdir, cd, and cp operations when invoked. That shell execution capability is material for marketplace risk review.

Risk Factors

⚙️ External commands (6)

scripts/create-worktree.sh:30 scripts/create-worktree.sh:31 scripts/create-worktree.sh:32 scripts/create-worktree.sh:36 scripts/create-worktree.sh:1 SKILL.md:13-15

📁 Filesystem access (3)

scripts/create-worktree.sh:33 scripts/create-worktree.sh:48 scripts/create-worktree.sh:68

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/akabanakk-create-git-worktree/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/akabanakk-create-git-worktree/security.svg)](https://skillstore.io/skills/akabanakk-create-git-worktree?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/akabanakk-create-git-worktree?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/akabanakk-create-git-worktree/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/akabanakk-create-git-worktree.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

AKABANAKK. (2026). create-git-worktree security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/akabanakk-create-git-worktree/audits/8

BibTeX citation

@techreport{akabanakk-akabanakk-create-git-worktree-2026,
  author = {AKABANAKK},
  title = {create-git-worktree security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/akabanakk-create-git-worktree/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "create-git-worktree security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "AKABANAKK"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/akabanakk-create-git-worktree/audits/8"
identifiers:
  - type: other
    value: "skillstore:akabanakk-create-git-worktree:audit:8"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Start Feature Work

Create a separate workspace for a feature branch while keeping the main checkout available.

Review Branches in Parallel

Open another branch for testing or review without stashing current work.

Prepare a Hotfix Workspace

Start a hotfix worktree from a selected release or main branch.

Try These Prompts

Create a Basic Worktree

Create a worktree for branch feature/profile-page.

Choose a Base Branch

Create a worktree for bugfix/login-timeout from main using this skill.

Reuse Existing Worktree

Create or reuse a worktree for feature/search-filter and tell me which path is used.

Check Risk Before Running

Before creating release/2.4-hotfix from release/2.4, tell me the target path and whether .env will be copied.

Best Practices

Review the target path before running the script.
Use --from when the base branch matters.
Remove copied secrets from worktrees that do not need them.

Avoid

Run the skill in a repository with uncommitted changes without checking status.
Use it when .env contains secrets that should not be duplicated.
Assume npm dependencies are installed by this script.

Frequently Asked Questions

Does this skill create a new repository copy?

No. It uses git worktree to create another working tree for the same repository.

Where does it place worktrees?

It places them in a sibling directory named after the repository with -worktrees appended.

Can I choose the base branch?

Yes. Provide --from with the base branch, or it uses the current branch.

Does it copy environment variables?

It copies the local .env file when one exists, which may duplicate secrets.

Does it install dependencies?

No. The included script does not run npm install or another package manager.

Is it safe to run automatically?

Use caution. It changes branches, pulls updates, creates directories, and may copy .env.

Developer Details

Author

AKABANAKK

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/AKABANAKK/claude-code-marketplace/tree/main/akb7/skills/create-git-worktree

Ref

6eec4a59f63ff83440a84c18d1aef79743bc714e

Maintenance freshness

7/18/2026

Usage

6 downloads · 193 views

File structure

📁 scripts/

📄 create-worktree.sh

📄 SKILL.md

More from AKABANAKK

View all

📦

high-quality-commit

Create Clean Git Commits

Messy commit history makes reviews and rollbacks harder. This skill guides Claude, Codex, or Claude Code through commit strategy, messages, and verification.

Coding & Development View

📦

remove-git-worktree

Remove Git Worktrees Safely

Abandoned Git worktrees can leave stale files and local branches behind. This skill runs a focused cleanup script for a named branch.

DevOps & Infrastructure View

📦

gemini-search

Search the Web with Gemini CLI

Current research tasks need fresh sources and concise summaries. This skill runs Gemini CLI search and asks it to return sourced Markdown.

Research & Learning View

View all

📦

git-workflow

Standardize Your Git Workflow

by Atman36

Inconsistent commits and branches make collaboration and releases harder to manage. This skill applies Conventional Commits, GitFlow, review practices, and pre-commit checks.

DevOps & Infrastructure View

📦

project-operator

Operate Local Project Stacks Safely

by ACSKamloops

Local development stacks can be hard to debug when logs, services, and config changes are handled out of order. This skill guides Claude, Codex, and Claude Code to inspect evidence first and explain safe operational steps.

DevOps & Infrastructure View

📦

git-advanced-workflows

Manage Advanced Git Workflows

by wshobson

Complex Git history tasks can break branches, hide bugs, or slow reviews. This skill provides structured guidance for safe rebases, cherry-picks, bisects, worktrees, and recovery.

DevOps & Infrastructure View

📦

git-submodule

Manage Git Submodules Safely

by supercent-io

Git submodules can be hard to add, update, and remove without mistakes. This skill provides structured workflows for common submodule tasks.

DevOps & Infrastructure View

📦

git-advanced

Master Advanced Git Workflows

by AutumnsGrove

Complex Git maintenance can make history changes and conflict resolution difficult. This skill provides structured guidance, recovery steps, and an optional local helper for common advanced workflows.

Coding & Development View

📦

finishing-a-development-branch

Finish Development Branches Safely

by ZhanlinCui

Completing a feature branch often requires tests, merge decisions, and cleanup. This skill guides Claude, Codex, and Claude Code through safe branch finishing choices.

Coding & Development View

create-git-worktree

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (4)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Skillstore Score

What You Can Build

Start Feature Work

Review Branches in Parallel

Prepare a Hotfix Workspace

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from AKABANAKK

high-quality-commit

remove-git-worktree

gemini-search

Related Skills

git-workflow

project-operator

git-advanced-workflows

git-submodule

git-advanced

finishing-a-development-branch