setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill configures the agent to ingest data from external sources like GitHub Issues and GitLab Merge Requests, which may contain malicious instructions.
- Ingestion points: Commands such as
gh issue viewandglab mr vieware configured to read descriptions and comments from issue trackers as defined inissue-tracker-github.mdandissue-tracker-gitlab.md. - Boundary markers: The provided templates lack specific delimiters or instructions for the agent to distinguish between data and instructions within the fetched ticket content.
- Capability inventory: The agent following this setup typically possesses capabilities for file modification and command execution.
- Sanitization: No explicit sanitization or validation of the retrieved ticket data is prescribed.
Audit Metadata