Skip to main content

push-recap

Generates detailed daily recaps of code pushes, analyzing changes and their implications for project development.

Install this skill

or
25/100

Security score

The push-recap skill was audited on Jun 15, 2026 and we found 7 security issues across 1 threat category, including 4 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 11

Template literal with variable interpolation in command context

SourceSKILL.md
11If `${var}` is set, only recap that repo (owner/repo format).
high line 45

Template literal with variable interpolation in command context

SourceSKILL.md
45**Significance gate.** After bot-filtering, if the remaining set is all empty across every watched repo: log `PUSH_RECAP_QUIET` to `memory/logs/${today}.md` and **stop — send no notification, write no
high line 104

Template literal with variable interpolation in command context

SourceSKILL.md
104Write to `articles/push-recap-${today}.md`:
medium line 106

Template literal with variable interpolation in command context

SourceSKILL.md
106```markdown
high line 167

Template literal with variable interpolation in command context

SourceSKILL.md
167Append to `memory/logs/${today}.md`:
medium line 169

Template literal with variable interpolation in command context

SourceSKILL.md
169```
medium line 188

Template literal with variable interpolation in command context

SourceSKILL.md
188```
Scanned on Jun 15, 2026
View Security Dashboard
Installation guide →