Skills using-git-worktrees

📦

using-git-worktrees

Name: using-git-worktrees
Author: Cycleaddict

Content revision r1 High Risk ⚙️ External commands📁 Filesystem access

Create Isolated Git Worktrees

Feature work can disrupt an active checkout and make baseline state unclear. This skill guides Claude, Codex, and Claude Code through isolated Git worktree setup with safety checks.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "using-git-worktrees" from https://skillstore.io/skills/cycleaddict-using-git-worktrees.md and its manifest at https://skillstore.io/api/skills/cycleaddict-using-git-worktrees/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/cycleaddict-using-git-worktrees.md Signed manifest GET /api/skills/cycleaddict-using-git-worktrees/manifest Signed lockfile GET /api/skills/cycleaddict-using-git-worktrees/lockfile

Test it

Using "using-git-worktrees". Create a worktree for feature/auth.

Expected outcome:

The assistant checks the preferred directory, verifies it is ignored, creates the branch worktree, and reports the ready path.

Using "using-git-worktrees". Set up a worktree and verify the baseline.

Expected outcome:

The assistant creates the isolated workspace, runs detected setup and tests, then reports pass or failure status before implementation.

Using "using-git-worktrees". No worktree directory exists.

Expected outcome:

The assistant asks whether to use a project-local hidden directory or a global configuration directory.

Security Audit

High Risk

v8 • 7/5/2026 Open versioned report

The static backtick, hidden-path, and /dev/null findings are false positives caused by Markdown documentation and legitimate worktree paths. The main risks are semantic: the skill directs agents to run package manager and test commands automatically, and it can commit .gitignore changes without explicit confirmation.

Files scanned

218

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

High

SKILL.md:101-130

Automatic Project Command Execution

The skill instructs the agent to automatically run dependency installation and test commands such as npm install, cargo build, pip install, poetry install, npm test, pytest, and go test. These commands can execute project-defined code in untrusted repositories.

The commands are explicitly listed and the prose says to auto-detect and run setup before verifying tests. Package managers and test commands commonly execute repository-controlled scripts.

Medium

SKILL.md:62-67

Unconfirmed Repository Commit Instruction

When a project-local worktree directory is not ignored, the skill instructs the agent to add a .gitignore entry, commit the change, and proceed. This can alter repository history without explicit user confirmation.

The instruction to commit is direct and unconditional after ignore verification fails. The risk is workflow integrity rather than covert exfiltration, so confidence is high but severity is moderate.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/cycleaddict-using-git-worktrees/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/cycleaddict-using-git-worktrees/security.svg)](https://skillstore.io/skills/cycleaddict-using-git-worktrees?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/cycleaddict-using-git-worktrees?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cycleaddict-using-git-worktrees/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/cycleaddict-using-git-worktrees.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

Cycleaddict. (2026). using-git-worktrees security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cycleaddict-using-git-worktrees/audits/8

BibTeX citation

@techreport{cycleaddict-cycleaddict-using-git-worktrees-2026,
  author = {Cycleaddict},
  title = {using-git-worktrees security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/cycleaddict-using-git-worktrees/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "using-git-worktrees security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "Cycleaddict"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/cycleaddict-using-git-worktrees/audits/8"
identifiers:
  - type: other
    value: "skillstore:cycleaddict-using-git-worktrees:audit:8"
    description: "Skillstore immutable audit report identifier"

Compare variants

9 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

ZhanlinCui Recommended

zhanlincui-using-git-worktrees

Skillstore Score 70

Evidence Confidence High

Skillstore usage 31

Updated

2026-08-21

Doyajin174

doyajin174-using-git-worktrees

Skillstore Score 70

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

CodingCossack

codingcossack-using-git-worktrees

Skillstore Score 70

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

DYAI2025

dyai2025-using-git-worktrees

Skillstore Score 69

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

obra

obra-using-git-worktrees

Skillstore Score 50

Evidence Confidence High

Skillstore usage 10

Updated

2026-08-21

Cygnusfear

cygnusfear-using-git-worktrees

Skillstore Score 50

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

sickn33

sickn33-using-git-worktrees

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

davila7

davila7-using-git-worktrees

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

Cycleaddict Current

cycleaddict-using-git-worktrees

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Start Feature Development

Create a clean worktree before implementing a feature while preserving the current checkout.

Prepare Parallel Fixes

Set up separate branches for unrelated fixes without switching the active workspace.

Validate Baseline State

Install project dependencies and run tests before starting implementation work.

Try These Prompts

Create a Basic Worktree

Use this skill to create a Git worktree for branch feature/login and tell me the final path.

Use Project Conventions

Set up an isolated worktree for this task. Follow the repository worktree directory preference if one exists.

Verify Before Implementation

Create a worktree for the payment refactor, install detected dependencies, run baseline tests, and report any failures before changes.

Control Risky Commands

Prepare a worktree for feature/search, but ask before running install, build, test, or commit commands.

Best Practices

Confirm the branch name and worktree location before creating files.
Ask before running install, build, test, or commit commands in unfamiliar repositories.
Review baseline test failures before starting implementation work.

Avoid

Creating a project-local worktree without checking Git ignore rules.
Committing .gitignore changes without user approval.
Running dependency installation in an untrusted repository without confirmation.

Frequently Asked Questions

What does this skill create?

It creates a separate Git worktree and branch for isolated development work.

Does it change my current checkout?

It is designed to avoid disrupting the current checkout by using a separate worktree.

Why does it check .gitignore?

It checks ignore rules to avoid accidentally tracking nested worktree contents.

Can it run commands automatically?

Yes. The documented workflow can run install, build, and test commands after creating the worktree.

Is it safe for untrusted repositories?

Use caution. Ask for confirmation before running package manager or test commands in untrusted code.

Which assistants can use it?

The report lists support for Claude, Codex, and Claude Code.

Developer Details

Author

Cycleaddict

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/Cycleaddict/generic-superpowers/tree/main/skills/using-git-worktrees

Ref

02f077c174c5335e2f5d02ca15e77b70d9543e58

Maintenance freshness

7/18/2026

Usage

6 downloads · 306 views

File structure

📄 SKILL.md

using-git-worktrees

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (2)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Compare variants

Skillstore Score

What You Can Build

Start Feature Development

Prepare Parallel Fixes

Validate Baseline State

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details