setup-matt-pocock-skills

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses git, gh (GitHub CLI), and glab (GitLab CLI) to explore repository state and configure issue tracker labels. These are standard operations for a repository setup tool.
  • [DATA_EXPOSURE]: The skill reads .git/config and uses git remote -v to identify the repository's origin (e.g., GitHub or GitLab) to provide appropriate configuration defaults.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes existing repository files which constitutes an indirect injection surface.
  • Ingestion points: Reads CLAUDE.md, AGENTS.md, and .git/config to understand the current project state.
  • Boundary markers: Does not use specific delimiters when reading existing documentation files.
  • Capability inventory: Includes file system modification (docs/agents/*.md, CLAUDE.md) and subprocess execution via CLI tools.
  • Sanitization: There is no explicit sanitization of existing file content before it is processed by the model.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 05:35 AM