setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute git commands and platform-specific CLI tools (GitHub's
ghand GitLab'sglab) to manage issues and retrieve repository metadata. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting and processing data from repository files such as
CONTEXT.md,CLAUDE.md, and Architecture Decision Records. - Ingestion points: Reads project files including
CLAUDE.md,AGENTS.md,CONTEXT.md,CONTEXT-MAP.md, and files withindocs/adr/. - Boundary markers: The instructions do not define specific delimiters or warnings to isolate external data from the prompt context.
- Capability inventory: The skill can perform file writes to
CLAUDE.md,AGENTS.md, anddocs/agents/, and execute shell commands usinggit,gh, andglab. - Sanitization: Ingested data is summarized and incorporated into configurations without explicit sanitization or filtering logic.
Audit Metadata