setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs repository discovery by reading local configuration files such as
.git/configand runninggit remote -v. This is used legitimately to identify the repository's host (e.g., GitHub) and provide context-aware configuration options. - [SAFE]: File system operations are restricted to the local repository, specifically reading and writing documentation in
docs/agents/and updatingCLAUDE.mdorAGENTS.md. No sensitive file paths outside the repository context are accessed. - [SAFE]: The skill provides templates for using the
gh(GitHub) CLI, which is a standard development tool. It does not attempt to download unauthorized binaries or execute remote scripts viacurl | bashor similar patterns. - [SAFE]: No obfuscation, prompt injection, or credential harvesting patterns were detected. The skill includes a clear interactive process that requires user confirmation before writing changes.
Audit Metadata