setup-matt-pocock-skills

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill performs discovery of repository configuration by reading .git/config and running git remote -v to identify the hosting provider and repository context.
  • [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The documentation references the official GitLab CLI repository (https://gitlab.com/gitlab-org/cli) as a resource for GitLab integration and describes how to use the gh and glab command-line tools for project management.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository metadata and file structures.
  • Ingestion points: SKILL.md reads .git/config, git remote -v, AGENTS.md, CLAUDE.md, CONTEXT.md, CONTEXT-MAP.md, and monorepo files.
  • Boundary markers: None present.
  • Capability inventory: SKILL.md writes configuration files to docs/agents/ and updates project files like CLAUDE.md or AGENTS.md.
  • Sanitization: None present; however, the skill requires user confirmation before performing write operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 05:00 PM
Security Audit — agent-trust-hub — setup-matt-pocock-skills