setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git,gh(GitHub CLI), andglab(GitLab CLI) to inspect repository status, view repository metadata, and manage issues and labels. These operations are core to the skill's purpose of automating repository setup. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local repository files and external issue trackers, creating a surface for potential indirect prompt injection attacks.
- Ingestion points: Reads repository configuration files (e.g.,
CLAUDE.md,AGENTS.md,GLOSSARY.md) and fetches issue/PR content via theghandglabtools. - Boundary markers: The instructions do not specify the use of delimiters or specific safety instructions to isolate ingested data from the agent's control logic.
- Capability inventory: The skill has the capability to write configuration files to the project directory and execute shell commands for repository management.
- Sanitization: No explicit sanitization or validation logic is defined for processing the data retrieved from repository files or remote trackers.
Audit Metadata