laravel-herd-worktrees
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell scripts to perform environment setup and cleanup.
- The
scripts/worktree-new.shscript executes local commands includinggit,mysql,php artisan, andcomposerto initialize worktrees. - The
scripts/worktree-rm.shscript handles the removal of worktrees and associated database resources. - [COMMAND_EXECUTION]: The documentation references the use of standard administrative commands for macOS system maintenance.
- In
references/herd-commands.md, the skill suggests usingsudo killall -HUP mDNSResponderto flush the DNS cache. - [EXTERNAL_DOWNLOADS]: The skill triggers the download of project dependencies from official public registries.
- Evidence includes the automated execution of
composer install,npm ci,pnpm install, andyarn installdepending on the project's detected configuration. - [CREDENTIALS_UNSAFE]: The scripts perform local file operations on configuration files to maintain environment isolation.
scripts/worktree-new.shcopies and modifies.envfiles locally to isolate application keys, database names, and cache prefixes for each branch.
Audit Metadata