Skip to main content

feature-audit

Conducts a comprehensive audit of shipped features against original plans and UX best practices, providing prioritized recommendations.

Install this skill

or
83/100

Security score

The feature-audit skill was audited on Mar 1, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 228

Template literal with variable interpolation in command context

SourceSKILL.md
228```bash
medium line 32

Access to hidden dotfiles in home directory

SourceSKILL.md
32| `--plan FILE` | `--plan ~/.claude/plans/my-plan.md` | — | Path to the execution/implementation plan |
low line 95

Access to hidden dotfiles in home directory

SourceSKILL.md
95- Label: "~/.claude/plans/ directory"
low line 105

Access to hidden dotfiles in home directory

SourceSKILL.md
105ls -lt ~/.claude/plans/*.md 2>/dev/null | head -10
low line 396

Access to hidden dotfiles in home directory

SourceSKILL.md
396--plan ~/.claude/plans/floating-whistling-fairy.md \
low line 34

External URL reference

SourceSKILL.md
34| `--url URL` | `--url http://localhost:4321` | — | Base URL of the running application |
low line 134

External URL reference

SourceSKILL.md
134- Label: "http://localhost:4321"
low line 136

External URL reference

SourceSKILL.md
136- Label: "http://localhost:3000"
low line 398

External URL reference

SourceSKILL.md
398--url http://localhost:4321 \
Scanned on Mar 1, 2026
View Security Dashboard