ship
Branch, commit, bump, push, and open a PR. Use when the user says "ship", "open a PR", "push this", "create a pull request", "commit and push", or "release this".
Install this skill
or
95/100
Security score
The ship skill was audited on May 13, 2026 and we found 1 security issue across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 40
Command substitution pattern
SourceSKILL.md
| 38 | - Never `git add .` — always stage files explicitly by name. |
| 39 | - Commit message bodies use the HEREDOC pattern to avoid quoting issues: |
| 40 | `git commit -m "$(cat <<'EOF' ... EOF)"` |
| 41 | - Never amend, force-push, or skip hooks. |
| 42 | - If the user provided a branch name or description as a parameter, use that instead of inferring one. |
Scanned on May 13, 2026
View Security Dashboard