setup-matt-pocock-skills

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs legitimate repository exploration by inspecting standard configuration files such as .git/config, package.json, and pnpm-workspace.yaml to adapt to the project's environment.
  • [SAFE]: External command execution is limited to official and well-known version control tools including git, gh (GitHub CLI), and glab (GitLab CLI). The instructions provide correct and safe usage patterns for these tools to interact with official repository APIs.
  • [SAFE]: The skill architecture adheres to safety best practices by requiring a manual confirmation step ('confirm with the user, then write') before modifying repository files like CLAUDE.md or creating new documentation in docs/agents/.
  • [SAFE]: The configuration templates for GitHub and GitLab use standard API endpoints for managing issue dependencies and triage labels without requesting elevated or unnecessary privileges.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 04:53 PM
Security Audit — agent-trust-hub — setup-matt-pocock-skills