pocket-development

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill relies on the pocketto-pi tool, which is executed via npx -y. This downloads and runs the vendor's implementation CLI from the NPM registry. These downloads are part of the intended primary purpose of the skill as authored by rfxlamia.
  • [COMMAND_EXECUTION]: The skill performs various shell operations to manage the development lifecycle. This includes extensive use of git (for creating worktrees, managing branches, and performing merges) and specific CLI actions like log init, log update, and lifecycle transition. The skill includes safeguards, such as requiring manual branch switching or user authorization for certain operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external files (implementation plans and task files) and feedback from other AI agents (implementers and auditors). It implements a comprehensive defense-in-depth strategy to maintain control over the agent's context and prevent malicious instructions in processed data from overriding behavior.
  • Ingestion points: Reads implementation plans from execution-plan/index.md, task-specific files from execution-plan/tasks/*.md, and JSON reports from subagents.
  • Boundary markers: Strong usage of 'Pocket Packets' and 'Sandwich Prompts'. These provide clear delimiters (e.g., ## OBJECTIVE, ## QUALITY BAR) and restate critical constraints at high-attention positions (start and end) to prevent context drift and instruction overriding.
  • Capability inventory: Subprocess execution (npx, git), file system access (reads/writes in the project directory), and network operations (via npx).
  • Sanitization: All critical data exchange between the main agent and subagents is governed by strict JSON schemas (e.g., review-report-template.md), ensuring that outputs are validated before processing.
  • [DYNAMIC_EXECUTION]: The skill uses npx for dynamic execution of the pocketto-pi package. This allows for cross-platform binary resolution and execution without a manual installation step, facilitating the automated lifecycle management defined in the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 03:55 AM