Skip to main content

prepare-pr

Prepares a GitHub PR for merge by rebasing, fixing review findings, and ensuring all gates are passed before pushing updates.

Install this skill

or
64/100

Security score

The prepare-pr skill was audited on Feb 21, 2026 and we found 12 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 86

Template literal with variable interpolation in command context

SourceSKILL.md
86```sh
medium line 255

Template literal with variable interpolation in command context

SourceSKILL.md
255```sh
medium line 294

Template literal with variable interpolation in command context

SourceSKILL.md
294```sh
medium line 15

Access to .env file

SourceSKILL.md
15- If missing, use `.local/pr-meta.env` from the PR worktree if present.
medium line 38

Access to .env file

SourceSKILL.md
38- Write `.local/prep.md` and `.local/prep.env`.
low line 73

Access to .env file

SourceSKILL.md
73if [ ! -f .local/pr-meta.env ]; then
low line 74

Access to .env file

SourceSKILL.md
74echo "Missing .local/pr-meta.env. Run /review-pr first and save metadata."
low line 79

Access to .env file

SourceSKILL.md
79source .local/pr-meta.env
medium line 292

Access to .env file

SourceSKILL.md
292Write `.local/prep.md` and `.local/prep.env` for merge handoff.
low line 298

Access to .env file

SourceSKILL.md
298cat > .local/prep.env <<EOF_ENV
low line 307

Access to .env file

SourceSKILL.md
307ls -la .local/prep.md .local/prep.env
low line 308

Access to .env file

SourceSKILL.md
308wc -l .local/prep.md .local/prep.env
Scanned on Feb 21, 2026
View Security Dashboard