pocket-development
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill relies on the
pocketto-pitool, which is executed vianpx -y. This downloads and runs the vendor's implementation CLI from the NPM registry. These downloads are part of the intended primary purpose of the skill as authored by rfxlamia. - [COMMAND_EXECUTION]: The skill performs various shell operations to manage the development lifecycle. This includes extensive use of
git(for creating worktrees, managing branches, and performing merges) and specific CLI actions likelog init,log update, andlifecycle transition. The skill includes safeguards, such as requiring manual branch switching or user authorization for certain operations. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external files (implementation plans and task files) and feedback from other AI agents (implementers and auditors). It implements a comprehensive defense-in-depth strategy to maintain control over the agent's context and prevent malicious instructions in processed data from overriding behavior.
- Ingestion points: Reads implementation plans from
execution-plan/index.md, task-specific files fromexecution-plan/tasks/*.md, and JSON reports from subagents. - Boundary markers: Strong usage of 'Pocket Packets' and 'Sandwich Prompts'. These provide clear delimiters (e.g.,
## OBJECTIVE,## QUALITY BAR) and restate critical constraints at high-attention positions (start and end) to prevent context drift and instruction overriding. - Capability inventory: Subprocess execution (npx, git), file system access (reads/writes in the project directory), and network operations (via npx).
- Sanitization: All critical data exchange between the main agent and subagents is governed by strict JSON schemas (e.g.,
review-report-template.md), ensuring that outputs are validated before processing. - [DYNAMIC_EXECUTION]: The skill uses
npxfor dynamic execution of thepocketto-pipackage. This allows for cross-platform binary resolution and execution without a manual installation step, facilitating the automated lifecycle management defined in the skill.
Audit Metadata