setup-matt-pocock-skills

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs repository discovery by reading local configuration files such as .git/config and running git remote -v. This is used legitimately to identify the repository's host (e.g., GitHub) and provide context-aware configuration options.
  • [SAFE]: File system operations are restricted to the local repository, specifically reading and writing documentation in docs/agents/ and updating CLAUDE.md or AGENTS.md. No sensitive file paths outside the repository context are accessed.
  • [SAFE]: The skill provides templates for using the gh (GitHub) CLI, which is a standard development tool. It does not attempt to download unauthorized binaries or execute remote scripts via curl | bash or similar patterns.
  • [SAFE]: No obfuscation, prompt injection, or credential harvesting patterns were detected. The skill includes a clear interactive process that requires user confirmation before writing changes.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 07:26 PM