setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill reads the repository's
.git/configfile to identify the remote origin URL. This is a standard operation required to configure GitHub or GitLab integrations. While.git/configcan occasionally contain sensitive tokens, this access is directly associated with the skill's primary setup purpose.- [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection. Ingestion points: It reads repository files such asCLAUDE.md,AGENTS.md, andCONTEXT.md. Boundary markers: No explicit delimiters are defined for the ingested content. Capability inventory: The skill performs file writes to the repository and executesgitcommands. Sanitization: The skill mitigates risks by summarizing all findings and requiring explicit user confirmation before writing or updating any files.- [COMMAND_EXECUTION]: The skill executes thegitCLI to inspect the repository state. It also generates templates that define standard workflows forghandglabCLI tools, which is consistent with its intended functionality of establishing repository conventions.
Audit Metadata