using-git-worktrees

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: Implements a protective environment copying mechanism in scripts/copy-env-local.sh that detects and strips sensitive Convex API keys and deployment secrets when synchronizing .env.local files between worktrees.
  • [COMMAND_EXECUTION]: Orchestrates standard development workflows by executing Git, Bun, and Node commands. It includes robust process management in scripts/worktree-dev.sh to ensure that only processes belonging to the specific worktree are terminated during cleanup.
  • [PRIVILEGE_ESCALATION]: Employs secure file handling practices by using chmod 600 on temporary environment files during the copying process to prevent unauthorized access to local configuration.
  • [EXTERNAL_DOWNLOADS]: Supports version pinning by downloading specific Bun releases via npx from the official npm registry when the local version does not match the project requirements, which is standard behavior for the supported tech stack.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 01:32 PM