findskill.top logo
findskill.top 技能市场详情页
agentskill.sh secured

using-git-worktrees

Use when starting feature work that needs isolation from current workspace or before executing implementation plans - creates isolated git worktrees with smart directory selection and safety verification

@obra skills/using-git-worktrees/SKILL.md GitHub Stars 87,265

安全评分

这个标签页按审计报告样式展示检测范围、问题列表和源片段。

安全评分 92/100
审计日期 2026年3月28日
审计摘要 0 / 1 / 3

高危 / 中危 / 低危

Categories 4
Findings 4
Platforms 1
Sources 1

检测类别

指令边界文件系统写入网络引用平台安装流程

安全问题

低危 File Access
第 46 行

Access to hidden dotfiles in home directory

严重级别: 低危 · 类别: File Access · 第 46 行
2. ~/.config/superpowers/worktrees/<project-name>/ (global location)
中危 File Access
第 71 行

Access to hidden dotfiles in home directory

严重级别: 中危 · 类别: File Access · 第 71 行
### For Global Directory (~/.config/superpowers/worktrees)
低危 File Access
第 91 行

Access to hidden dotfiles in home directory

严重级别: 低危 · 类别: File Access · 第 91 行
~/.config/superpowers/worktrees/*)
低危 File Access
第 92 行

Access to hidden dotfiles in home directory

严重级别: 低危 · 类别: File Access · 第 92 行
path="~/.config/superpowers/worktrees/$project/$BRANCH_NAME"

缓解建议

Review the upstream repository before copying files into a local skills directory.

Confirm install instructions and supported runtimes against SKILL.md instead of a generic readme.