Skip to main content

worktree

Facilitates the management of git worktrees for isolated development, enabling parallel work on multiple branches.

Install this skill

or
66/100

Security score

The worktree skill was audited on Mar 1, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 57

Template literal with variable interpolation in command context

SourceSKILL.md
57```bash
medium line 91

Template literal with variable interpolation in command context

SourceSKILL.md
91```bash
medium line 101

Template literal with variable interpolation in command context

SourceSKILL.md
101```bash
medium line 134

Template literal with variable interpolation in command context

SourceSKILL.md
134```bash
medium line 223

Template literal with variable interpolation in command context

SourceSKILL.md
223```bash
low line 59

Access to hidden dotfiles in home directory

SourceSKILL.md
59PLUGIN_ROOT=$(jq -r '.plugins."daplug@cruzanstx"[0].installPath' ~/.claude/plugins/installed_plugins.json)
low line 93

Access to hidden dotfiles in home directory

SourceSKILL.md
93PLUGIN_ROOT=$(jq -r '.plugins."daplug@cruzanstx"[0].installPath' ~/.claude/plugins/installed_plugins.json)
low line 139

Access to hidden dotfiles in home directory

SourceSKILL.md
139PLUGIN_ROOT=$(jq -r '.plugins."daplug@cruzanstx"[0].installPath' ~/.claude/plugins/installed_plugins.json)
low line 226

Access to hidden dotfiles in home directory

SourceSKILL.md
226PLUGIN_ROOT=$(jq -r '.plugins."daplug@cruzanstx"[0].installPath' ~/.claude/plugins/installed_plugins.json)
medium line 266

Access to hidden dotfiles in home directory

SourceSKILL.md
266Worktrees require file permissions for the worktrees directory. Check/add to `~/.claude/settings.json`:
Scanned on Mar 1, 2026
View Security Dashboard