All skills
getsentry avatar

/warden-sweep

@c2936ff
by Sentrygetsentry/xcodebuildmcp6.5k stars
321

Full-repository code sweep. Scans every file with warden, verifies findings via deep tracing, creates draft PRs for validated issues. Use when asked to "sweep the repo", "scan everything", "find all bugs", "full codebase review", "batch code analysis", or run warden across the entire repository.

Use this Skill: https://skilld.dev/gh/getsentry/xcodebuildmcp/warden-sweep

This session only. Nothing lands on disk.

referencesverify-prompt.md

≈227 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Verify a code analysis finding. Determine if this is a TRUE issue or a FALSE POSITIVE. Do NOT write or edit any files. Research only.

Finding

  • Title: ${TITLE}
  • Severity: ${SEVERITY} | Confidence: ${CONFIDENCE}
  • Skill: ${SKILL}
  • Location: ${FILE_PATH}:${START_LINE}-${END_LINE}
  • Description: ${DESCRIPTION}
  • Verification hint: ${VERIFICATION}

Instructions

  1. Read the file at the reported location. Examine at least 50 lines of surrounding context.
  2. Trace data flow to/from the flagged code using Grep/Glob.
  3. Check if the issue is mitigated elsewhere (guards, validation, try/catch upstream).
  4. Check if the issue is actually reachable in practice.

Return your verdict as JSON: { "findingId": "${FINDING_ID}", "verdict": "verified" or "rejected", "confidence": "high" or "medium" or "low", "reasoning": "2-3 sentence explanation", "traceNotes": "What code paths you examined" }

Source: SKILL.md on GitHub

1 warning2d3 checks · Risk SAFE
  • Gen Agent Trust Hub2d

    The warden-sweep skill provides automated repository scanning, issue tracking, and patching using the Warden tool and GitHub CLI. The skill is designed for repository maintenance and security audits; however, it has an indirect prompt injection surface because it incorporates untrusted data from the scanned codebase into instructions for secondary AI agents.

  • Socket2d

    No alerts

  • Snyk2d

    Risk: MEDIUM · 1 issue

Signed by skilld at c2936ff. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub last week.

Activeupdated 5 months ago
disable-model-invocation
true

README badge

README badge for getsentry/xcodebuildmcp/warden-sweep