Skills using-git-worktrees

📦

using-git-worktrees

Name: using-git-worktrees
Author: ZhanlinCui

Content revision r1 Medium Risk ⚙️ External commands📁 Filesystem access

Create Isolated Git Worktrees

Developers need isolated branches without disturbing their current workspace. This skill guides Claude, Codex, and Claude Code through safe worktree setup and baseline checks.

Supports: Claude Codex Code(CC)

📊 70 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "using-git-worktrees" from https://skillstore.io/skills/zhanlincui-using-git-worktrees.md and its manifest at https://skillstore.io/api/skills/zhanlincui-using-git-worktrees/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/zhanlincui-using-git-worktrees.md Signed manifest GET /api/skills/zhanlincui-using-git-worktrees/manifest Signed lockfile GET /api/skills/zhanlincui-using-git-worktrees/lockfile

Test it

Using "using-git-worktrees". Create a worktree for an authentication feature.

Expected outcome:

The response identifies the selected worktree directory, confirms ignore verification, reports the new branch, and summarizes baseline test status.

Using "using-git-worktrees". No worktree directory exists in the repository.

Expected outcome:

The response asks the user to choose between a project-local directory and the documented global location.

Using "using-git-worktrees". Baseline tests fail after setup.

Expected outcome:

The response reports the failing test summary and asks whether to investigate or proceed with known failures.

Security Audit

Medium Risk

v5 • 7/8/2026 Open versioned report

Most static findings are false positives caused by Markdown fences, inline command examples, stderr redirects, and documented worktree paths. The main residual risk is that the skill can run project setup and test commands automatically, which is unsafe in untrusted repositories without confirmation.

Files scanned

218

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

Medium

SKILL.md:105-129

Automatic Project Command Execution

SKILL.md tells the agent to auto-detect and run dependency installation, build, download, and test commands after creating a worktree. In untrusted repositories, those commands can execute project-controlled scripts without a clear confirmation step.

The commands are explicitly listed in the setup and baseline sections, and the text says to auto-detect and run them. The risk depends on repository trust, so confidence is high but not absolute.

Low

SKILL.md:62-67

Repository Mutation Without Explicit Approval

SKILL.md instructs the agent to add a worktree ignore rule and commit the change when a project-local directory is not ignored. This can alter repository history before the user has approved that specific commit.

The instruction to add and commit the change is direct. The purpose is protective, so this is a workflow safety issue rather than evidence of malicious intent.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/zhanlincui-using-git-worktrees/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/zhanlincui-using-git-worktrees/security.svg)](https://skillstore.io/skills/zhanlincui-using-git-worktrees?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/zhanlincui-using-git-worktrees?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zhanlincui-using-git-worktrees/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/zhanlincui-using-git-worktrees.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

ZhanlinCui. (2026). using-git-worktrees security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zhanlincui-using-git-worktrees/audits/5

BibTeX citation

@techreport{zhanlincui-zhanlincui-using-git-worktrees-2026,
  author = {ZhanlinCui},
  title = {using-git-worktrees security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/zhanlincui-using-git-worktrees/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "using-git-worktrees security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "ZhanlinCui"
date-released: "2026-07-08"
url: "https://skillstore.io/skills/zhanlincui-using-git-worktrees/audits/5"
identifiers:
  - type: other
    value: "skillstore:zhanlincui-using-git-worktrees:audit:5"
    description: "Skillstore immutable audit report identifier"

Compare variants

9 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

ZhanlinCui Recommended Current

zhanlincui-using-git-worktrees

Skillstore Score 70

Evidence Confidence High

Skillstore usage 31

Updated

2026-08-21

Doyajin174

doyajin174-using-git-worktrees

Skillstore Score 70

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

CodingCossack

codingcossack-using-git-worktrees

Skillstore Score 70

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

DYAI2025

dyai2025-using-git-worktrees

Skillstore Score 69

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

obra

obra-using-git-worktrees

Skillstore Score 50

Evidence Confidence High

Skillstore usage 10

Updated

2026-08-21

Cygnusfear

cygnusfear-using-git-worktrees

Skillstore Score 50

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

sickn33

sickn33-using-git-worktrees

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

davila7

davila7-using-git-worktrees

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

Cycleaddict

cycleaddict-using-git-worktrees

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Feature Branch Isolation

Create a separate workspace for implementation while keeping the current checkout untouched.

Parallel Review Work

Open a bug fix or review branch beside active work without switching branches.

Agent Workflow Preparation

Prepare a clean worktree before an implementation plan runs through Claude, Codex, or Claude Code.

Try These Prompts

Create a Worktree

Create an isolated Git worktree for this feature. Follow the project directory preference, verify ignore rules, and report the final path.

Use Existing Conventions

Set up a worktree for feature/<name>. Check existing worktree directories and CLAUDE.md before asking me for a location.

Prepare and Verify Baseline

Create a worktree for this task, run the detected setup steps, execute baseline tests, and stop if tests fail.

Plan Multiple Worktrees

Create separate worktrees for implementation and release verification. Use project conventions, avoid tracked worktree directories, and summarize each workspace status.

Best Practices

Verify ignore rules before creating project-local worktrees.
Ask before running setup commands in repositories you do not fully trust.
Record the final worktree path and baseline test result.

Avoid

Creating worktrees inside tracked directories.
Skipping CLAUDE.md or existing project conventions.
Continuing after failing baseline tests without user approval.

Frequently Asked Questions

What problem does this skill solve?

It creates an isolated Git workspace so feature work does not disturb the current checkout.

Does it require Claude?

No. It is compatible with Claude, Codex, and Claude Code when they can run Git commands.

Does it create branches?

Yes. It guides creation of a new worktree with a new branch name.

Can it use a global directory?

Yes. It can use ~/.config/superpowers/worktrees after user selection or project convention.

Will it run project setup commands?

Yes. It suggests setup and test commands based on project files, so review them for untrusted repositories.

Does it clean up worktrees?

No. Cleanup is outside this skill and should be handled by a finishing workflow.

Developer Details

Author

ZhanlinCui

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/using-git-worktrees

Ref

88a205c7f635a966e31156313b590d59007c5caa

Maintenance freshness

7/18/2026

Usage

28 downloads · 338 views

File structure

📄 SKILL.md

using-git-worktrees

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (2)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Compare variants

Skillstore Score

What You Can Build

Feature Branch Isolation

Parallel Review Work

Agent Workflow Preparation

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from ZhanlinCui

planning-with-files

github-release-assistant

obsidian-helper

pdf

frontend-design

brainstorming

git-advanced-workflows

git-workflow

git-submodule

finishing-a-development-branch

git-advanced

git-commit

using-git-worktrees

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (2)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Compare variants

Skillstore Score

What You Can Build

Feature Branch Isolation

Parallel Review Work

Agent Workflow Preparation

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from ZhanlinCui

planning-with-files

github-release-assistant

obsidian-helper

pdf

frontend-design

brainstorming

Related Skills

git-advanced-workflows

git-workflow

git-submodule

finishing-a-development-branch

git-advanced

git-commit