pr-description-generator
Warn
Audited by Socket on Sep 30, 2026
1 alert found:
SecuritySecuritygenerate.js
MEDIUMSecurityMEDIUM
generate.js
No intrinsic malware behavior is evident. The utility has a command-injection vulnerability: untrusted CLI values are interpolated into shell commands executed by execSync. Validate and constrain Git references, or use execFileSync with argument arrays.
Confidence: 98%Severity: 78%
Audit Metadata