yangshu2087/worktree-safety
.agents/skills/worktree-safety/SKILL.md
Safely operate in repositories that use Git worktrees or live inside a meta-workspace with multiple repos. Use when a task involves git roots, linked worktrees, pointer directories, or avoiding the wrong repository context.
tools
Updated Apr 16, 2026
$ install --global
skillsauthnpx skillsauth add yangshu2087/Codex worktree-safetyInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 3:36 PM34.2s1 file scanned
SKILL.md
- name:
- worktree-safety
- description:
- Safely operate in repositories that use Git worktrees or live inside a meta-workspace with multiple repos. Use when a task involves git roots, linked worktrees, pointer directories, or avoiding the wrong repository context.
Worktree Safety
Use this skill when the user task touches Git worktrees, multiple adjacent repositories, or a meta-workspace that is not itself a repo.
Workflow
- Identify the real repository before running Git commands:
git rev-parse --show-toplevelgit worktree listwhen relevant
- Distinguish normal repos from pointer directories and wrapper workspaces.
- Do not run root-level Git commands from
/Users/yangshu/Codex; it is a meta-workspace, not a repository. - When a linked worktree exists, assume branch and checkout operations can affect another active checkout.
- If the task is only about Codex config or AGENTS files, edit the intended repo directly and avoid unrelated branch manipulation.
- Verify with repository-local Git commands after edits.
Local context
/Users/yangshu/Codex/codex-worktree-baseis a real repo that hosts a persistent worktree./Users/yangshu/Codex/projects/codex-mainis a normal local repo./Users/yangshu/Codex/projects/codex-headand/Users/yangshu/Codex/codex-worktree-headare worktree-related locations and should not be treated like independent repos without checking first.
Related Skills
yangshu2087/terrashark
development
VerifiedTrustedCommunity
Use when explicitly reviewing, generating, refactoring, or migrating Terraform/OpenTofu IaC and checking failure modes such as identity churn, secrets, blast radius, CI drift, or compliance gates.
SKILL.mdUpdated Apr 16, 2026
yangshu2087/stitch-ui-prompt-architect
development
VerifiedTrustedCommunity
Use when the user explicitly mentions Google Stitch and wants a structured Stitch-ready UI prompt or prompt refinement from rough product/design ideas.
SKILL.mdUpdated Apr 16, 2026
yangshu2087/stitch-react-components
development
VerifiedTrustedCommunity
Use when the user explicitly mentions Google Stitch and asks to convert Stitch designs into Vite, CRA, or generic React components.
SKILL.mdUpdated Apr 16, 2026
yangshu2087/stitch-nextjs-components
development
VerifiedTrustedCommunity
Use when the user explicitly mentions Google Stitch and asks to convert Stitch designs into Next.js App Router components.
SKILL.mdUpdated Apr 16, 2026