fluid-release

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Autonomous Repository Operations: The skill is designed to automatically modify the repository, including pushing branches and creating Pull Requests, when operating in autonomous or CI modes. This capability is central to its role in release engineering and requires appropriate repository permissions.
  • External Data Ingestion and Processing: The skill's behavior is guided by data retrieved from the repository environment, such as package.json files, git tags, and external release schedules. 1. Ingestion points: The skill reads package.json for current versions, queries git tags (git tag -l), and references references/release-schedule.md to determine release states (File: SKILL.md). 2. Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the data processed from these files. 3. Capability inventory: The skill has the capability to execute shell commands like git push, gh pr create, npm pkg set, and pnpm install (Files: references/minor-release-prep.md, references/release-execution.md). 4. Sanitization: While the skill performs consistency checks on version numbers, it does not explicitly define sanitization routines for metadata extracted from repository files before use in shell commands.
  • Environment-Based Behavior Modification: The skill adjusts its interaction model, such as skipping user confirmation prompts, based on the presence of the CI environment variable (File: SKILL.md).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 04:30 AM
Security Audit — agent-trust-hub — fluid-release