You'll notice
Creating a git worktree can now be refused if the repo's git config sets an unsafe Git LFS-related key
What
Claude Code can now refuse to create a git worktree or checkout with a new reason, unsafe_key, when the repository's own git config sets an LFS (Git Large File Storage)-related config key that names a program git-lfs would run during checkout or status.
Why
A repository's git config can be crafted to make git-lfs automatically run an arbitrary program. Refusing the worktree creation in that case stops Claude Code from triggering that program without the user knowing.