setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions and templates for using standard command-line interfaces, including
git,gh(GitHub CLI), andglab(GitLab CLI). These tools are used for repository exploration and managing issues, labels, and CI/CD pipelines as part of the intended setup process. - [INDIRECT_PROMPT_INJECTION]: The skill ingests information from repository files such as
GLOSSARY.md,AGENTS.md, and Architecture Decision Records (ADRs) to summarize the current state of the repo. While this reading of potentially untrusted data represents an attack surface, the skill incorporates a human-in-the-loop boundary by requiring the agent to present findings and confirm all proposed changes with the user before writing any files.
Audit Metadata