# Using Git Worktrees

> Using Git Worktrees is a community-maintained skill from obra/superpowers. Anomity scores its risk at 65 out of 100 (high). It matches 1 dangerous capability combination.

- **Canonical URL:** https://catalog.anomity.ai/skill/using-git-worktrees
- **Kind:** Skill
- **Publisher:** obra/superpowers
- **Trust level:** community
- **Risk score:** 65/100 (high)
- **Last updated:** 2026-09-02
- **JSON:** https://catalog.anomity.ai/api/entries/skill/using-git-worktrees

## Description

Using Git Worktrees is a workspace-management skill from the Superpowers plugin that creates isolated git worktrees for feature work, keeping each branch in its own directory rather than constantly stashing and switching in a single checkout. It is intended for any task that needs isolation from the current workspace state — running a long-form refactor while continuing to ship hotfixes from main, executing an implementation plan in parallel with other work, or letting the agent operate without disturbing the user's local edits.

Functionally, the skill reads the current repository state to determine where to base the new worktree, writes a new worktree directory plus tracking metadata, and shells out to git through the Claude Code Bash tool to create, list, and clean up worktrees. It does not request network or credential access.

The skill is community trust and uses three declared capabilities — filesystem read, filesystem write, and shell execute. Shell execution is the one that lights up the larger risk signal, but because the shell calls are scoped to git operations and the skill is part of a well-known plugin, the practical risk is contained. It does match one half of the data-exfiltration dangerous combination on its own; the combination only activates when the running agent also has outbound network access.

## Why it scored 65

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Established community project | -10 | trust offset |  |
| 2 high-risk capabilities: filesystem:write, shell:execute | +20 | critical |  |
| Persistence + execution risk (medium) | +5 | medium | Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts). |

Clamped result: **65/100**, band **high**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `filesystem:read` | Filesystem read | Can read files on the host system. Used for context, indexing, or analysis. |
| `filesystem:write` | Filesystem write | Can create, edit, or delete files on the host system. High-impact capability — anything from helpful edits to planting persistence. |
| `shell:execute` | Shell execution | Can run arbitrary shell commands. Combined with network access this becomes effectively a remote shell. |

## Dangerous combinations matched

### Persistence + execution risk (medium)

Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts).

Capabilities: `shell:execute`, `filesystem:write`

## Related skills

- [AI Research Reproduction](https://catalog.anomity.ai/skill/ai-research-reproduction) — risk 100 (critical)
- [Best Practices](https://catalog.anomity.ai/skill/web-best-practices) — risk 50 (medium)
- [Check](https://catalog.anomity.ai/skill/check-review) — risk 50 (medium)
- [Test-Driven Development](https://catalog.anomity.ai/skill/test-driven-development) — risk 50 (medium)
- [Writing Skills](https://catalog.anomity.ai/skill/writing-skills) — risk 50 (medium)
- [Angular Developer](https://catalog.anomity.ai/skill/angular-developer) — risk 20 (low)

---

Source: Anomity Catalog (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json