Skills using-git-worktrees
📦

using-git-worktrees

Content revision r1 Medium Risk ⚙️ External commands📁 Filesystem access

Create Isolated Git Worktrees

Developers need isolated branches without disturbing their current workspace. This skill guides Claude, Codex, and Claude Code through safe worktree setup and baseline checks.

Supports: Claude Codex Code(CC)
📊 70 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "using-git-worktrees" from https://skillstore.io/skills/zhanlincui-using-git-worktrees.md and its manifest at https://skillstore.io/api/skills/zhanlincui-using-git-worktrees/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/zhanlincui-using-git-worktrees.md Signed manifest GET /api/skills/zhanlincui-using-git-worktrees/manifest Signed lockfile GET /api/skills/zhanlincui-using-git-worktrees/lockfile

Test it

Using "using-git-worktrees". Create a worktree for an authentication feature.

Expected outcome:

The response identifies the selected worktree directory, confirms ignore verification, reports the new branch, and summarizes baseline test status.

Using "using-git-worktrees". No worktree directory exists in the repository.

Expected outcome:

The response asks the user to choose between a project-local directory and the documented global location.

Using "using-git-worktrees". Baseline tests fail after setup.

Expected outcome:

The response reports the failing test summary and asks whether to investigate or proceed with known failures.

Security Audit

Medium Risk
v5 • 7/8/2026 Open versioned report

Most static findings are false positives caused by Markdown fences, inline command examples, stderr redirects, and documented worktree paths. The main residual risk is that the skill can run project setup and test commands automatically, which is unsafe in untrusted repositories without confirmation.

1
Files scanned
218
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (2)

Medium
SKILL.md:105-129
Automatic Project Command Execution
SKILL.md tells the agent to auto-detect and run dependency installation, build, download, and test commands after creating a worktree. In untrusted repositories, those commands can execute project-controlled scripts without a clear confirmation step.
The commands are explicitly listed in the setup and baseline sections, and the text says to auto-detect and run them. The risk depends on repository trust, so confidence is high but not absolute.
Low
SKILL.md:62-67
Repository Mutation Without Explicit Approval
SKILL.md instructs the agent to add a worktree ignore rule and commit the change when a project-local directory is not ignored. This can alter repository history before the user has approved that specific commit.
The instruction to add and commit the change is direct. The purpose is protective, so this is a workflow safety issue rather than evidence of malicious intent.

Risk Factors

⚙️ External commands (26)
SKILL.md:22-26 SKILL.md:26-28 SKILL.md:28-32 SKILL.md:32-34 SKILL.md:34-42 SKILL.md:42-49 SKILL.md:49-57 SKILL.md:57-60 SKILL.md:60-79 SKILL.md:79-81 SKILL.md:81-85 SKILL.md:85-99 SKILL.md:99-105 SKILL.md:105-118 SKILL.md:118-124 SKILL.md:124-130 SKILL.md:130-138 SKILL.md:138-142 SKILL.md:142-148 SKILL.md:148-149 SKILL.md:149-150 SKILL.md:150-161 SKILL.md:161-180 SKILL.md:180-192 SKILL.md:80 SKILL.md:79-81
📁 Filesystem access (13)
SKILL.md:46 SKILL.md:71 SKILL.md:91 SKILL.md:92 SKILL.md:46 SKILL.md:71 SKILL.md:91 SKILL.md:92 SKILL.md:189 SKILL.md:24 SKILL.md:25 SKILL.md:33 SKILL.md:59
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/zhanlincui-using-git-worktrees/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/zhanlincui-using-git-worktrees/security.svg)](https://skillstore.io/skills/zhanlincui-using-git-worktrees?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/zhanlincui-using-git-worktrees?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zhanlincui-using-git-worktrees/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/zhanlincui-using-git-worktrees.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

ZhanlinCui. (2026). using-git-worktrees security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zhanlincui-using-git-worktrees/audits/5

BibTeX citation

@techreport{zhanlincui-zhanlincui-using-git-worktrees-2026, author = {ZhanlinCui}, title = {using-git-worktrees security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/zhanlincui-using-git-worktrees/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "using-git-worktrees security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "ZhanlinCui" date-released: "2026-07-08" url: "https://skillstore.io/skills/zhanlincui-using-git-worktrees/audits/5" identifiers: - type: other value: "skillstore:zhanlincui-using-git-worktrees:audit:5" description: "Skillstore immutable audit report identifier"

Compare variants

9 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage
ZhanlinCui Recommended Current

zhanlincui-using-git-worktrees

Skillstore Score 70
Evidence Confidence High
Skillstore usage 32
Updated

2026-09-09

Doyajin174

doyajin174-using-git-worktrees

Skillstore Score 70
Evidence Confidence High
Skillstore usage 9
Updated

2026-09-09

CodingCossack

codingcossack-using-git-worktrees

Skillstore Score 70
Evidence Confidence High
Skillstore usage 8
Updated

2026-09-09

DYAI2025

dyai2025-using-git-worktrees

Skillstore Score 69
Evidence Confidence Medium
Skillstore usage 11
Updated

2026-09-09

obra

obra-using-git-worktrees

Skillstore Score 50
Evidence Confidence High
Skillstore usage 11
Updated

2026-09-09

Cygnusfear

cygnusfear-using-git-worktrees

Skillstore Score 50
Evidence Confidence High
Skillstore usage 10
Updated

2026-09-09

sickn33

sickn33-using-git-worktrees

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 11
Updated

2026-09-09

Cycleaddict

cycleaddict-using-git-worktrees

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated

2026-09-09

davila7

davila7-using-git-worktrees

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated

2026-09-09

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
72
Community
83
Spec Compliance

What You Can Build

Feature Branch Isolation

Create a separate workspace for implementation while keeping the current checkout untouched.

Parallel Review Work

Open a bug fix or review branch beside active work without switching branches.

Agent Workflow Preparation

Prepare a clean worktree before an implementation plan runs through Claude, Codex, or Claude Code.

Try These Prompts

Create a Worktree 
Create an isolated Git worktree for this feature. Follow the project directory preference, verify ignore rules, and report the final path.
Use Existing Conventions 
Set up a worktree for feature/<name>. Check existing worktree directories and CLAUDE.md before asking me for a location.
Prepare and Verify Baseline 
Create a worktree for this task, run the detected setup steps, execute baseline tests, and stop if tests fail.
Plan Multiple Worktrees 
Create separate worktrees for implementation and release verification. Use project conventions, avoid tracked worktree directories, and summarize each workspace status.

Best Practices

  • Verify ignore rules before creating project-local worktrees.
  • Ask before running setup commands in repositories you do not fully trust.
  • Record the final worktree path and baseline test result.

Avoid

  • Creating worktrees inside tracked directories.
  • Skipping CLAUDE.md or existing project conventions.
  • Continuing after failing baseline tests without user approval.

Frequently Asked Questions

What problem does this skill solve?
It creates an isolated Git workspace so feature work does not disturb the current checkout.
Does it require Claude?
No. It is compatible with Claude, Codex, and Claude Code when they can run Git commands.
Does it create branches?
Yes. It guides creation of a new worktree with a new branch name.
Can it use a global directory?
Yes. It can use ~/.config/superpowers/worktrees after user selection or project convention.
Will it run project setup commands?
Yes. It suggests setup and test commands based on project files, so review them for untrusted repositories.
Does it clean up worktrees?
No. Cleanup is outside this skill and should be handled by a finishing workflow.

Developer Details

Author

ZhanlinCui

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/using-git-worktrees

Ref

88a205c7f635a966e31156313b590d59007c5caa

Maintenance freshness

7/18/2026

Usage

28 downloads · 338 views

File structure

📄 SKILL.md