Skip to main content

wrap-up

Facilitates end-of-session tasks, ensuring proper shipping, normalization, and memory persistence for improved workflow management.

Install this skill

or
80/100

Security score

The wrap-up skill was audited on Mar 7, 2026 and we found 4 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 30

Access to hidden dotfiles in home directory

SourceSKILL.md
30- `GH_TOKEN=$(~/.claude/scripts/gh-app-token.sh) gh pr create ...` for ClinearHubBot identity
medium line 66

Access to hidden dotfiles in home directory

SourceSKILL.md
663. **Code + Plannotator**: If `~/.plannotator/history/` has a recent version, read it
medium line 158

Access to hidden dotfiles in home directory

SourceSKILL.md
158| **Auto memory** (`~/.claude/projects/.../memory/`) | Debugging insights, patterns, project quirks discovered this session | "Promptfoo v0.105 API types don't match docs — use CLI instead" |
medium line 25

Access to .env file

SourceSKILL.md
25- Stage specific files (never `git add -A` — check for `.env`, credentials, large binaries)
Scanned on Mar 7, 2026
View Security Dashboard