push-recap
Generates detailed daily recaps of code pushes, analyzing changes and their implications for project development.
Install this skill
or
30/100
Security score
The push-recap skill was audited on May 30, 2026 and we found 6 security issues across 1 threat category, including 4 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 9
Template literal with variable interpolation in command context
SourceSKILL.md
| 9 | If `${var}` is set, only recap that repo (owner/repo format). |
high line 40
Template literal with variable interpolation in command context
SourceSKILL.md
| 40 | 3. **If no commits found** across all watched repos: log "PUSH_RECAP_QUIET" to `memory/logs/${today}.md` and **stop here — do NOT send any notification**. |
high line 60
Template literal with variable interpolation in command context
SourceSKILL.md
| 60 | 8. **Write a deep recap** to `articles/push-recap-${today}.md`: |
medium line 61
Template literal with variable interpolation in command context
SourceSKILL.md
| 61 | ```markdown |
high line 114
Template literal with variable interpolation in command context
SourceSKILL.md
| 114 | 9. **Log** to `memory/logs/${today}.md` (repos covered, commit count, article path). **Do this before sending the notification.** |
medium line 117
Template literal with variable interpolation in command context
SourceSKILL.md
| 117 | ``` |
Scanned on May 30, 2026
View Security Dashboard