Skills worktree-manager-skill

📦

worktree-manager-skill

Name: worktree-manager-skill
Author: EGAdams

Content revision r1 Medium Risk 🌐 Network access⚙️ External commands

Manage Git Worktrees Safely

Parallel development can create branch, port, and cleanup confusion. This skill guides Git worktree creation, listing, removal, and troubleshooting with isolated local settings.

Supports: Claude Codex Code(CC)

📊 69 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "worktree-manager-skill" from https://skillstore.io/skills/egadams-worktree-manager-skill.md and its manifest at https://skillstore.io/api/skills/egadams-worktree-manager-skill/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/egadams-worktree-manager-skill.md Signed manifest GET /api/skills/egadams-worktree-manager-skill/manifest Signed lockfile GET /api/skills/egadams-worktree-manager-skill/lockfile

Test it

Using "worktree-manager-skill". Create a worktree for feature-authentication.

Expected outcome:

The assistant identifies the branch, starts the creation workflow, and reports the worktree path, local URLs, and assigned ports.

Using "worktree-manager-skill". What worktrees are running?

Expected outcome:

The assistant lists each worktree, highlights running or stopped services, and notes any port conflicts.

Using "worktree-manager-skill". Remove the old feature-auth worktree.

Expected outcome:

The assistant confirms the target, runs the removal workflow, and reports stopped services and cleanup results.

Security Audit

Medium Risk

v8 • 7/5/2026 Open versioned report

The static findings are mostly false positives from documentation examples, localhost URLs, slash command names, and .env references. I found no prompt injection attempt or evidence of credential exfiltration. One medium semantic risk remains because troubleshooting guidance includes manual force-kill and directory removal steps.

Files scanned

794

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

TROUBLESHOOTING.md:77-80 TROUBLESHOOTING.md:119-121

Destructive Cleanup Guidance

Troubleshooting guidance includes force-killing processes and manually removing orphaned worktree directories. These are legitimate recovery steps, but wrong targets could cause data loss or stop unrelated services.

The cited lines directly advise force-killing PIDs and using rm -rf on worktree paths. The context is troubleshooting, so the concern is data-loss risk rather than malicious intent.

Risk Factors

🌐 Network access (2)

REFERENCE.md:114 REFERENCE.md:126

⚙️ External commands (6)

SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:39 SKILL.md:43 SKILL.md:47

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/egadams-worktree-manager-skill/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/egadams-worktree-manager-skill/security.svg)](https://skillstore.io/skills/egadams-worktree-manager-skill?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/egadams-worktree-manager-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/egadams-worktree-manager-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/egadams-worktree-manager-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

EGAdams. (2026). worktree-manager-skill security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/egadams-worktree-manager-skill/audits/8

BibTeX citation

@techreport{egadams-egadams-worktree-manager-skill-2026,
  author = {EGAdams},
  title = {worktree-manager-skill security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/egadams-worktree-manager-skill/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "worktree-manager-skill security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "EGAdams"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/egadams-worktree-manager-skill/audits/8"
identifiers:
  - type: other
    value: "skillstore:egadams-worktree-manager-skill:audit:8"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Create Parallel Feature Environments

Set up a separate worktree with unique ports for a feature branch.

Review Active Worktrees

List worktrees, service status, ports, and access URLs before changing local environments.

Clean Up Completed Branch Worktrees

Remove old worktrees and stop their related services after work is merged.

Try These Prompts

List Current Worktrees

Show my current worktrees, their service status, ports, and local access URLs.

Create Feature Worktree

Create a worktree for the feature-auth branch and tell me the dashboard and server URLs.

Resolve Port Conflict

My worktree has a port conflict. Check existing worktrees and suggest the safest next action.

Plan Multiple Environments

Create a plan for three branch worktrees with unique port offsets and cleanup steps after review.

Best Practices

Confirm the target branch before creating or removing a worktree.
Use the list workflow before cleanup so ports, paths, and service state are visible.
Keep environment files local and avoid sharing secret values in responses.