setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to guide an agent through a one-time configuration process for a repository. It provides templates for documentation and issue tracking conventions.
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard, well-known CLI tools such as
git,gh(GitHub CLI), andglab(GitLab CLI). These tools are used for repository exploration and issue management, which is consistent with the skill's stated purpose. - [DATA_EXFILTRATION]: While the skill reads repository metadata (e.g.,
.git/config) and local files (e.g.,CLAUDE.md), this data is used locally to determine the repository's configuration. There are no patterns suggesting unauthorized exfiltration of sensitive information to external servers. - [NO_CODE]: The skill consists entirely of markdown instructions and configuration templates. It does not contain executable scripts or binary files, significantly reducing the attack surface.
Audit Metadata