setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git,gh(GitHub CLI), andglab(GitLab CLI) to explore repository state and configure issue tracker labels. These are standard operations for a repository setup tool. - [DATA_EXPOSURE]: The skill reads
.git/configand usesgit remote -vto identify the repository's origin (e.g., GitHub or GitLab) to provide appropriate configuration defaults. - [INDIRECT_PROMPT_INJECTION]: The skill processes existing repository files which constitutes an indirect injection surface.
- Ingestion points: Reads
CLAUDE.md,AGENTS.md, and.git/configto understand the current project state. - Boundary markers: Does not use specific delimiters when reading existing documentation files.
- Capability inventory: Includes file system modification (
docs/agents/*.md,CLAUDE.md) and subprocess execution via CLI tools. - Sanitization: There is no explicit sanitization of existing file content before it is processed by the model.
Audit Metadata