setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill performs discovery of repository configuration by reading
.git/configand runninggit remote -vto identify the hosting provider and repository context. - [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The documentation references the official GitLab CLI repository (
https://gitlab.com/gitlab-org/cli) as a resource for GitLab integration and describes how to use theghandglabcommand-line tools for project management. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository metadata and file structures.
- Ingestion points:
SKILL.mdreads.git/config,git remote -v,AGENTS.md,CLAUDE.md,CONTEXT.md,CONTEXT-MAP.md, and monorepo files. - Boundary markers: None present.
- Capability inventory:
SKILL.mdwrites configuration files todocs/agents/and updates project files likeCLAUDE.mdorAGENTS.md. - Sanitization: None present; however, the skill requires user confirmation before performing write operations.
Audit Metadata