laravel-herd-worktrees
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts (
worktree-new.sh,worktree-rm.sh) to execute local git commands, manage databases (MySQL/PostgreSQL), and handle PHP dependency management (Composer/NPM/Yarn/PNPM). These operations are standard development tasks for the intended Laravel and Laravel Herd ecosystem. - [DATA_EXPOSURE_AND_EXFILTRATION]: While the scripts access and modify
.envfiles, this is done locally to ensure environment isolation (e.g., changingAPP_URLandDB_DATABASE). No data is exfiltrated to external domains, and network calls are limited to official package managers (Composer/NPM) and local database servers. - [PRIVILEGE_ESCALATION]: The skill does not attempt to use
sudoor modify system-level protected files. It operates within the user's home directory and standard macOS development paths used by Laravel Herd.
Audit Metadata