Open every pull request through this skill. It self-reviews the diff, proves the change, measures the merge danger, and writes the fixed PR body (Problem, Change, Proof, Review, Merge danger) that the PR gate and the pr-kit CI check require. Use before any `gh pr create`, `gh api .../pulls`, or PR body edit.
- Stars
- 333
- Version
- v1
- Copies
- 0
Overview
Waxell rates it high risk: 1 finding, highest severity critical.
- Highest severity
- critical
- Findings
- 1
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
High risk Waxell rates it high risk: 1 finding, highest severity critical.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (1)
critical · 1
- critical
Tells Claude to download a script and pipe it to a shell
command.ts:35 · skill_risk:S1
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1, seen 2026-11-03.
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More engineering skills and plugins
android-device-automationweb-infra-devVision-driven Android device automation using Midscene. Operates entirely from screenshots, no DOM or accessibility labels required. Can… Review findingsEngineering319
harmonyos-device-automationweb-infra-devVision-driven HarmonyOS NEXT device automation using Midscene. Operates entirely from screenshots, no DOM or accessibility labels… Review findingsEngineering319
ios-device-automationweb-infra-devVision-driven iOS device automation using Midscene CLI. Operates entirely from screenshots, no DOM or accessibility labels required. Can… Review findingsEngineering319
app-sdk-conceptsgrafanaUse when starting any grafana-app-sdk work: scaffolding a Grafana app, initializing a Grafana App Platform app, picking a deployment mode… Review findingsEngineeringProductivity302