laravel-herd-worktrees

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell scripts to perform environment setup and cleanup.
  • The scripts/worktree-new.sh script executes local commands including git, mysql, php artisan, and composer to initialize worktrees.
  • The scripts/worktree-rm.sh script handles the removal of worktrees and associated database resources.
  • [COMMAND_EXECUTION]: The documentation references the use of standard administrative commands for macOS system maintenance.
  • In references/herd-commands.md, the skill suggests using sudo killall -HUP mDNSResponder to flush the DNS cache.
  • [EXTERNAL_DOWNLOADS]: The skill triggers the download of project dependencies from official public registries.
  • Evidence includes the automated execution of composer install, npm ci, pnpm install, and yarn install depending on the project's detected configuration.
  • [CREDENTIALS_UNSAFE]: The scripts perform local file operations on configuration files to maintain environment isolation.
  • scripts/worktree-new.sh copies and modifies .env files locally to isolate application keys, database names, and cache prefixes for each branch.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 02:23 PM
Security Audit — agent-trust-hub — laravel-herd-worktrees