Skip to main content

merge-pr

Facilitates deterministic squash merging of pull requests with strict validation and reliable attribution for enhanced code management.

Install this skill

or
88/100

Security score

The merge-pr skill was audited on Mar 1, 2026 and we found 4 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 54

Template literal with variable interpolation in command context

SourceSKILL.md
54```sh
medium line 15

Access to .env file

SourceSKILL.md
15- If missing, use `.local/prep.env` from the PR worktree.
low line 55

Access to .env file

SourceSKILL.md
55require=(.local/review.md .local/review.json .local/prep.md .local/prep.env)
low line 65

Access to .env file

SourceSKILL.md
65source .local/prep.env
Scanned on Mar 1, 2026
View Security Dashboard