setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions and associated templates define conventions for using standard command-line interfaces such as
git,gh(GitHub CLI), andglab(GitLab CLI). These are used for repository exploration and managing issues/pull requests, which is the core functionality of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the repository's environment, including git configuration and various metadata files (e.g.,
package.json,CLAUDE.md). While this constitutes an injection surface, the skill includes explicit instructions to summarize findings and obtain user confirmation before performing any write operations, effectively mitigating the risk of unintended actions triggered by malicious repository content. - [EXTERNAL_DOWNLOADS]: The skill provides a reference to the official GitLab CLI repository (
gitlab.com/gitlab-org/cli). This is a well-known service and is documented as a prerequisite for GitLab-based issue tracking functionality. - [METADATA_POISONING]: The skill's metadata accurately reflects its purpose of configuring a repository for engineering tasks. No deceptive or malicious patterns were found in the name, description, or other fields.
Audit Metadata