Pi extensions run with the permissions of the current user. Review this package before installation.

worktree-flow invokes Git, starts child Pi worker processes, writes Worktree manifests and task registries, and can remove registered Worktrees after explicit confirmation. It does not commit, push, merge, rewrite Git history, or delete branches automatically.

Do not include credentials in task text, configuration files, repository paths, or task result output. Report security issues through GitHub private vulnerability reporting when enabled: https://github.com/TY-ang/pi-worktree-flow/security/advisories/new. Do not include sensitive details in public issues.