worktree
Facilitates parallel development by setting up git worktrees, copying environment files, and installing dependencies efficiently.
Install this skill
or
80/100
Security score
The worktree skill was audited on May 18, 2026 and we found 8 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 3
Access to .env file
SourceSKILL.md
| 3 | description: Set up a new git worktree for parallel development. Creates the worktree, copies .env files, installs dependencies, and generates Prisma client. TRIGGER when user asks to set up a worktre |
medium line 30
Access to .env file
SourceSKILL.md
| 30 | Copy `.env` from the root worktree. Falls back to `.env.default` if `.env` doesn't exist. |
low line 37
Access to .env file
SourceSKILL.md
| 37 | if [ -f "$ROOT/$envpath/.env" ]; then |
low line 38
Access to .env file
SourceSKILL.md
| 38 | cp "$ROOT/$envpath/.env" "$TARGET/$envpath/.env" |
low line 39
Access to .env file
SourceSKILL.md
| 39 | elif [ -f "$ROOT/$envpath/.env.default" ]; then |
low line 40
Access to .env file
SourceSKILL.md
| 40 | cp "$ROOT/$envpath/.env.default" "$TARGET/$envpath/.env" |
medium line 70
Access to .env file
SourceSKILL.md
| 70 | SDK mode spawns a Claude subprocess — won't work inside Claude Code. Set `CHAT_USE_CLAUDE_AGENT_SDK=false` in `backend/.env` to use baseline mode. |
low line 81
External URL reference
SourceSKILL.md
| 81 | If [branchlet](https://www.npmjs.com/package/branchlet) is installed: |
Scanned on May 18, 2026
View Security DashboardGitHub Stars 15
Rate this skill
Categorydevelopment
UpdatedJune 15, 2026
HIDORAKAI002/ai-workspace-archive