merge-pr
Facilitates deterministic squash merging of pull requests with strict validation and reliable attribution for enhanced code management.
Install this skill
or
88/100
Security score
The merge-pr skill was audited on Feb 21, 2026 and we found 4 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 54
Template literal with variable interpolation in command context
SourceSKILL.md
| 54 | ```sh |
medium line 15
Access to .env file
SourceSKILL.md
| 15 | - If missing, use `.local/prep.env` from the PR worktree. |
low line 55
Access to .env file
SourceSKILL.md
| 55 | require=(.local/review.md .local/review.json .local/prep.md .local/prep.env) |
low line 65
Access to .env file
SourceSKILL.md
| 65 | source .local/prep.env |
Scanned on Feb 21, 2026
View Security DashboardInstall this skill with one command
/learn @ashishop/merge-pr