fluid-pr

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill utilizes standard command-line tools such as git and gh (GitHub CLI) to automate the process of creating pull requests. These tools are used within the scope of its described purpose.
  • Context: The instructions include proactive checks to verify the current branch and git remote before execution, which serves as a safeguard against accidental misuse on protected branches.
  • Data Handling and Injection Surface: The skill processes user-supplied information and data from the environment to construct pull request titles and bodies.
  • Ingestion points: Data enters the skill via branch names and contents from the referenced fluid-pr-guide skill.
  • Boundary markers: The skill follows security best practices by using quoted here-documents (cat <<'EOF') when passing content to shell commands. This prevents the shell from interpreting or executing any characters within the pull request body.
  • Capability inventory: The skill uses git push and gh pr create as seen in SKILL.md.
  • Sanitization: By using the quoted EOF pattern, the skill effectively sanitizes the input, ensuring that the pull request description is treated strictly as text data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 09:55 PM