fleet-protocol
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to utilize a local CLI tool (
fleet.mjs) and standard Git commands for repository management and session coordination. These operations follow standard development patterns for automating workflow tasks. - [INDIRECT_PROMPT_INJECTION]: The orchestration protocol relies on shared local logs (such as
registry.mdandheartbeats/*.md) to coordinate state across multiple agents. While this creates an ingestion surface for data written by other agents or derived from Git metadata, the skill mitigates this risk through mandatory format validation, read-back checks, and a 'ASSERTED vs DELIVERED' evidence framework. - [EXTERNAL_DOWNLOADS]: The skill performs standard Git operations (
fetch,push) and interacts with forge APIs (e.g., GitHub) to manage pull requests and verify check statuses. These interactions are restricted to the repositories defined in the localfleet.config.json.
Audit Metadata