setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use common command-line tools such as
git,gh(GitHub CLI), andglab(GitLab CLI) to discover repository metadata and manage project tickets. These operations are restricted to standard issue management tasks. - [PROMPT_INJECTION]: The skill establishes an environment for processing untrusted data from external sources, creating a surface for indirect prompt injection.
- Ingestion points: The agent is instructed to read issue titles, bodies, and comments from GitHub, GitLab, or local markdown files.
- Boundary markers: There are no instructions defining explicit delimiters or security warnings to prevent the agent from obeying instructions embedded within the issue data.
- Capability inventory: Across the configured workflows, the agent has the capability to execute shell commands (
gh,glab,git) and perform file system operations (read/write to repository documentation and configuration files). - Sanitization: The skill does not provide logic for sanitizing or validating external content before it is processed by the agent.
Audit Metadata