Home / Skills / om-auto-sec-report-pr
om-auto-sec-report-pr
open-mercato/open-mercatoSkill
Paranoid OWASP-oriented security analysis for a SINGLE unit of work — one PR, one spec under `.ai/specs/`, or one branch diff. Hunts non-obvious attack vectors beyond OWASP Top 10, flags same-pattern hotspots elsewhere, and emits \"Next steps — go deeper\" follow-ups. Writes markdown + HTML under `.ai/analysis/`; runs standalone or as a sub-unit of `om-auto-sec-report`.
Why this score
This repo hosts 10 skills, so its 1,870 stars are split between them (about 187 each) for scoring.
Popularity score: 73/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 21, 2026 at commit 4374c48def16, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneom-auto-sec-report-pr open-mercato/open-mercato · Skill | 73 | ★ 1.9k | ≈99 always | 16d ago |
| pr mattpocock/skills · Skill Both about pr | 96 | ★ 297k | ≈8 always | 16d ago |
| write-pr MoonshotAI/kimi-code · Skill Both about pr | 79 | ★ 7.9k | ≈22 always | 16d ago |
| alibabacloud-ecs-sec-kernel aliyun/alibabacloud-ecs-troubleshoot-skills · Skill Both about sec | 58 | ★ 148 | ≈18 always | 3mo ago |
| visual-pr humanlayer/skills · Skill Both about pr | 76 | ★ 5.4k | ≈18 always | 27d ago |
| prepare-pr atsushi-green/ds-ai-coding-skills · Skill Both about pr | 53 | ★ 91 | ≈9 always | 1mo ago |