super-worktree

super-worktree is a skill for Claude Code, Codex from bahayonghang/my-ai-cli-toolkit. It costs 62 tokens per session (2,011 once invoked), scanned D, original, MIT.

A manager for creating and maintaining isolated Git worktrees, which are separate folders for different branches of the same repository. It also handles copying environment files and sharing installed Node.js dependencies between worktrees.

In plain words
What is it for?
It helps create worktrees for features, hotfixes, tickets, or pull requests, then list, re-sync, merge, remove, or prune them.
Why use it?
It reduces the manual setup needed when working on several branches at once. It also provides commands for checking status, syncing files, merging, deleting, and cleaning up worktrees.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions Codex; mentions OpenCode.

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is bash scripts/worktree-manager.sh create <branch> [from-branch] [options].

Good fit It helps create worktrees for features, hotfixes, tickets, or pull requests, then list, re-sync, merge, remove, or prune them.

Compare 6 skills from other repositories ↓
Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/bahayonghang/my-ai-cli-toolkit
agentmods
npx agentmods add skills/bahayonghang/my-ai-cli-toolkit/super-worktree

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for super-worktree

README.md
[![agentmods](https://agentmods.dev/badge/skills/bahayonghang/my-ai-cli-toolkit/super-worktree/github.svg)](https://agentmods.dev/skills/bahayonghang/my-ai-cli-toolkit/super-worktree)
Your own site
<a href="https://agentmods.dev/skills/bahayonghang/my-ai-cli-toolkit/super-worktree"><img src="https://agentmods.dev/badge/skills/bahayonghang/my-ai-cli-toolkit/super-worktree/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for super-worktree

Your own site · 80×15
<a href="https://agentmods.dev/skills/bahayonghang/my-ai-cli-toolkit/super-worktree"><img src="https://agentmods.dev/badge/skills/bahayonghang/my-ai-cli-toolkit/super-worktree.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 62 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,011 The whole file, excluding the scripts and references it only reads on demand.
Security scan D 2 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00062 $0.02011
Opus 5 $0.00031 $0.01006
Sonnet 5 $0.00012 $0.00402
Haiku 4.5 $0.00006 $0.00201

Measured 8d ago against content hash c8592a3f9a54, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade D, and why

super-worktree scanned grade D with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

| "jq not found" | `brew install jq` (macOS) / `sudo apt install jq` (Ubuntu) |

Reaches for credential fileshighPrivilege escalation

SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.

{ "sync": { "copyFiles": ["${HOME}/.aws/credentials"] } }
.trellis/tasks/archive/2026-08/08-17-git-worktree-skill/research/super-worktree-SKILL.md · 237 lines

How it starts

The opening of the file, as written. The whole thing — 237 lines — stays where its author put it; the contents beside it link to each section on GitHub.

super-worktree

Git worktree manager with env file copying and node_modules symlinking. Work on multiple branches at once without leaving your session.


What users can say (copy-paste prompts)

After installing, users can say things like these to their AI agent:

Create:

  • "Create a worktree for feature/login"
  • "Set up a worktree for hotfix from production"
  • "Start work on TEST-1 with slug 'test feature'"
  • "Spin up a worktree for PR 1234" (requires gh)
  • "Spin up a worktree for MR 42" (requires glab)

Manage:

  • "List my worktrees / show me which ones are dirty"
  • "Delete the payments worktree"
  • "Re-sync env files into the login worktree"
  • "Merge feature/login back into main and clean up"
  • "Prune orphan worktrees"
  • "Show me worktree status as JSON"

With AI tool integration:

  • "Create a worktree and append claude to the cd hint"
  • --tool opencode or --tool codex also work

How it works

bash scripts/worktree-manager.sh create <branch> [from-branch] [options]
  1. Creates a git worktree at .worktrees/<branch>/
  2. Copies env files (.env, credentials, etc.) from source
  3. Symlinks node_modules (saves disk space)
  4. Runs lifecycle hooks (preCreate, postCreate, etc.)
  5. Prints a copy-pasteable cd hint

Config schema (super-worktree.json)

Place in repo root. All fields optional.

{
  "$schema": "./schemas/super-worktree.schema.json",
  "version": 1,
  "sync": {
    "copyFiles": [
      ".env", ".env.*", ".envrc", ".local.*",
      "*.secret", "*.key", ".secrets.*",
      "credentials.json", "credentials.yml", "credentials.env",
      "auth.json", "auth.yml", "auth.env",
      ".dev.vars", ".prod.vars", ".staging.vars"
    ],
    "symlinkDirs": ["node_modules"],
    "exclude": ["node_modules", ".git", "dist", "build", ".next",
                "out", "coverage", ".turbo", ".vercel", ".worktrees"],
    "copyDepth": 2
  },
  "hooks": {
    "preCreate":  "echo creating $BRANCH",
    "postCreate": "pnpm install --frozen-lockfile",
    "preDelete":  "echo cleaning $BRANCH"
  }
}

Read the full file on GitHub · 237 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 237 lines · 62 tokens per session scan D c8592a3f9a54

Subscribe to this mod's changes

super-worktree is a skill published in the GitHub repository bahayonghang/my-ai-cli-toolkit (16 stars, last pushed 2d ago), licensed MIT. It adds 62 tokens to every session and 2,011 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it D with 2 findings (asks for root, reaches for credential files). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.

Related

Other skills, from other repositories

prowler-commit

Creates professional git commits following conventional-commits format. Trigger: When creating commits, after completing code changes, when user asks to commit.

prowler-cloud/prowler · 33 tokens

gh-auth-isolation

Safely manage multiple GitHub identities (EMU + personal) in agent workflows.

github/gh-aw · 20 tokens

comet-github

A routing guide for Comet-related GitHub work. It directs requests about pull requests, issues, CI failures, ideas, and fixes to the appropriate review or implementation process.

rpamis/comet · 72 tokens

github-skill

Work with GitHub via the gh CLI — clone repositories, create/list/merge pull requests, create/list issues, and run any other gh command (API calls, workflow runs, releases, repo administration). List operations return parsed JSON.

zeenie-ai/OpenCompany · 51 tokens

changelog-composer

Generates structured changelogs and release notes from git history and PRs, classifying breaking changes, features, fixes, performance, docs. Triggers on: "generate changelog", "write release notes", "what changed since", "prepare release", "release notes for", "diff since tag".

Mathews-Tom/armory · 67 tokens

re0-merge

Review and land an external contribution the way this suite does: gate it against the thesis, land it with the author's credit intact, complete a new skill rather than merging it raw, then approve, credit, and explain before closing. Use when reviewing a pull request, as any collaborator or maintainer, not only the…

LilMGenius/paperthin · 70 tokens