pr-draft-summary
Automates the creation of PR titles and draft descriptions after code changes, streamlining the pull request process.
Install this skill
or
55/100
Security score
The pr-draft-summary skill was audited on May 14, 2026 and we found 3 security issues across 1 threat category, including 3 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 27
Template literal with variable interpolation in command context
SourceSKILL.md
| 27 | - Commits ahead of the base fork point: `git log --oneline --no-merges ${BASE_COMMIT}..HEAD`. |
high line 33
Template literal with variable interpolation in command context
SourceSKILL.md
| 33 | 2. If there are no staged/unstaged/untracked changes and no commits ahead of `${BASE_COMMIT}`, reply briefly that no code changes were detected and skip emitting the PR block. |
high line 35
Template literal with variable interpolation in command context
SourceSKILL.md
| 35 | 4. Summarize changes in 1–3 short sentences using the key paths (top 5) and `git diff --stat` output; explicitly call out untracked files from `git status -sb`/`git ls-files --others --exclude-standar |
Scanned on May 14, 2026
View Security Dashboard