OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Apr 23, 2026
Independent checks from skills.sh's audit partners.
The skill automates Git worktree management but includes a risk where it automatically runs dependency installation commands (e.g., npm/pip install) after checking out branches. This could lead to the execution of malicious code contained within untrusted remote branches or Pull Requests.
Detected behaviors
No alerts
No issues