kata-configure-settings
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
SecuritySecurityscripts/setup-worktrees.sh
MEDIUMSecurityMEDIUM
scripts/setup-worktrees.sh
The fragment appears to implement a legitimate Git worktree layout migration rather than malware. It contains no visible exfiltration or persistence behavior, but its broad recursive deletion of all non-allowlisted root files is highly destructive and should be treated as a security and data-loss risk. The unseen `kata-lib.cjs` utility and preceding setup logic require separate review before execution.
Confidence: 96%Severity: 78%
Audit Metadata