fluid-pr
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes standard command-line tools such as
gitandgh(GitHub CLI) to automate the process of creating pull requests. These tools are used within the scope of its described purpose. - Context: The instructions include proactive checks to verify the current branch and git remote before execution, which serves as a safeguard against accidental misuse on protected branches.
- Data Handling and Injection Surface: The skill processes user-supplied information and data from the environment to construct pull request titles and bodies.
- Ingestion points: Data enters the skill via branch names and contents from the referenced
fluid-pr-guideskill. - Boundary markers: The skill follows security best practices by using quoted here-documents (
cat <<'EOF') when passing content to shell commands. This prevents the shell from interpreting or executing any characters within the pull request body. - Capability inventory: The skill uses
git pushandgh pr createas seen inSKILL.md. - Sanitization: By using the quoted
EOFpattern, the skill effectively sanitizes the input, ensuring that the pull request description is treated strictly as text data.
Audit Metadata