Skip to main content

ship

Automates the shipping workflow by merging branches, running tests, and creating pull requests without user interaction.

Install this skill

or
78/100

Security score

The ship skill was audited on Mar 17, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 21

Access to hidden dotfiles in home directory

SourceSKILL.md
21_UPD=$(~/.claude/skills/gstack/bin/gstack-update-check 2>/dev/null || .claude/skills/gstack/bin/gstack-update-check 2>/dev/null || true)
low line 23

Access to hidden dotfiles in home directory

SourceSKILL.md
23mkdir -p ~/.gstack/sessions
low line 24

Access to hidden dotfiles in home directory

SourceSKILL.md
24touch ~/.gstack/sessions/"$PPID"
low line 25

Access to hidden dotfiles in home directory

SourceSKILL.md
25_SESSIONS=$(find ~/.gstack/sessions -mmin -120 -type f 2>/dev/null | wc -l | tr -d ' ')
low line 26

Access to hidden dotfiles in home directory

SourceSKILL.md
26find ~/.gstack/sessions -mmin +120 -type f -delete 2>/dev/null || true
low line 27

Access to hidden dotfiles in home directory

SourceSKILL.md
27_CONTRIB=$(~/.claude/skills/gstack/bin/gstack-config get gstack_contributor 2>/dev/null || true)
medium line 30

Access to hidden dotfiles in home directory

SourceSKILL.md
30If output shows `UPGRADE_AVAILABLE <old> <new>`: read `~/.claude/skills/gstack/gstack-upgrade/SKILL.md` and follow the "Inline upgrade flow" (auto-upgrade if configured, otherwise AskUserQuestion with
medium line 51

Access to hidden dotfiles in home directory

SourceSKILL.md
51**To file:** write `~/.gstack/contributor-logs/{slug}.md` with this structure:
medium line 71

Access to hidden dotfiles in home directory

SourceSKILL.md
71Then run: `mkdir -p ~/.gstack/contributor-logs && open ~/.gstack/contributor-logs/{slug}.md`
low line 450

External URL reference

SourceSKILL.md
450🤖 Generated with [Claude Code](https://claude.com/claude-code)
Scanned on Mar 17, 2026
View Security Dashboard
Installation guide →