kata-configure-settings

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/setup-worktrees.sh

The fragment appears to implement a legitimate Git worktree layout migration rather than malware. It contains no visible exfiltration or persistence behavior, but its broad recursive deletion of all non-allowlisted root files is highly destructive and should be treated as a security and data-loss risk. The unseen `kata-lib.cjs` utility and preceding setup logic require separate review before execution.

Confidence: 96%Severity: 78%
Audit Metadata
Analyzed At
Sep 18, 2026, 10:55 PM
Package URL
pkg:socket/skills-sh/gannonh%2Fkata-skills%2Fkata-configure-settings%2F@4898169babfe9a84c4545ca4f89d133a586245365a56a33d798dbd7b69fd0aa5