using-git-worktrees
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: Implements a protective environment copying mechanism in
scripts/copy-env-local.shthat detects and strips sensitive Convex API keys and deployment secrets when synchronizing.env.localfiles between worktrees. - [COMMAND_EXECUTION]: Orchestrates standard development workflows by executing Git, Bun, and Node commands. It includes robust process management in
scripts/worktree-dev.shto ensure that only processes belonging to the specific worktree are terminated during cleanup. - [PRIVILEGE_ESCALATION]: Employs secure file handling practices by using
chmod 600on temporary environment files during the copying process to prevent unauthorized access to local configuration. - [EXTERNAL_DOWNLOADS]: Supports version pinning by downloading specific Bun releases via
npxfrom the official npm registry when the local version does not match the project requirements, which is standard behavior for the supported tech stack.
Audit Metadata