warden-sweep
Conducts comprehensive code sweeps to identify and validate issues, generating draft PRs for improved code quality.
Install this skill
Security score
The warden-sweep skill was audited on May 16, 2026 and we found 25 security issues across 2 threat categories, including 4 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 13 | **Important**: Run all scripts from the repository root using `${CLAUDE_SKILL_ROOT}`. Output goes to `.warden/sweeps/<run-id>/`. |
Template literal with variable interpolation in command context
| 21 | ```bash |
Template literal with variable interpolation in command context
| 30 | ```bash |
Template literal with variable interpolation in command context
| 38 | ```bash |
Template literal with variable interpolation in command context
| 46 | ```bash |
Template literal with variable interpolation in command context
| 54 | ```bash |
Template literal with variable interpolation in command context
| 62 | ```bash |
Template literal with variable interpolation in command context
| 70 | ```bash |
Template literal with variable interpolation in command context
| 82 | ```bash |
Template literal with variable interpolation in command context
| 88 | ```bash |
Template literal with variable interpolation in command context
| 127 | Read `${CLAUDE_SKILL_ROOT}/references/verify-prompt.md` for the prompt template. Substitute the finding's values into the `${...}` placeholders. |
Template literal with variable interpolation in command context
| 136 | ```markdown |
Template literal with variable interpolation in command context
| 152 | ```diff |
Template literal with variable interpolation in command context
| 187 | ```bash |
Template literal with variable interpolation in command context
| 213 | ```bash |
Template literal with variable interpolation in command context
| 221 | ```bash |
Template literal with variable interpolation in command context
| 240 | ```bash |
Template literal with variable interpolation in command context
| 250 | Launch a Task subagent (`subagent_type: "general-purpose"`) to apply the fix in the worktree. Read `${CLAUDE_SKILL_ROOT}/references/patch-prompt.md` for the prompt template. Substitute the finding's v |
Template literal with variable interpolation in command context
| 255 | 1. Record the finding in `data/patches.jsonl` with `"status": "error"` and `"error": "Subagent skipped: ${skipReason}"` |
Template literal with variable interpolation in command context
| 261 | ```bash |
Template literal with variable interpolation in command context
| 267 | ```bash |
Template literal with variable interpolation in command context
| 273 | ```bash |
Template literal with variable interpolation in command context
| 310 | ```bash |
Template literal with variable interpolation in command context
| 339 | ```bash |
External URL reference
| 306 | {"findingId": "...", "prUrl": "https://...", "branch": "...", "reviewers": ["user1", "user2"], "filesChanged": ["..."], "status": "created|existing|error"} |