setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes existing repository files to inform its configuration process, which presents a surface for instructions embedded in data to influence agent behavior.
- Ingestion points: Reads files from the repository root including
CLAUDE.md,AGENTS.md,CONTEXT.md, andpackage.json(as seen inSKILL.md). - Boundary markers: No explicit delimiter markers are used when reading these files.
- Capability inventory: The skill has the capability to write new markdown files to the
docs/agents/directory and modify existing agent instruction files. - Sanitization: The skill includes a human-in-the-loop mitigation, requiring the agent to present a draft of all changes to the user for confirmation and potential editing before writing to the filesystem.
- [COMMAND_EXECUTION]: The skill uses local system commands and provides guidance for utilizing external CLI tools to manage repository resources.
- Evidence: Executes
git remote -vto identify the hosting provider. It also provides comprehensive templates for using thegh(GitHub) andglab(GitLab) CLI tools for issue and pull request management. - [DATA_EXFILTRATION]: The skill accesses local repository metadata to determine its operating context.
- Evidence: Accesses
.git/configandgit remote -voutput to identify repository origin URLs. This information is used locally to suggest the appropriate issue tracker configuration (GitHub vs. GitLab).
Audit Metadata