pocket-enterprise

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes several system commands including gh, git, node, and npx to interact with GitHub repositories, verify authentication status, and manage local project state.
  • [DYNAMIC_EXECUTION]: The skill implements a lifecycle adapter registration mechanism in .pocket/lifecycle-adapter.json. This file stores execution arguments (argv), including runtime tokens like @pocketto-node, which are expanded and executed by the core system during lifecycle events.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from GitHub, such as issue titles, labels, and pull request comments.
  • Ingestion points: Data is ingested via gh api and gh issue list calls to reconcile plan identities and statuses.
  • Boundary markers: The skill uses specific markers like <!-- pocket-phase-<N>-summary --> and <!-- pocket-tasklist --> to delimit its own content.
  • Capability inventory: The skill has the ability to write to the local filesystem, push branches via Git, and execute configured adapter scripts.
  • Sanitization: The skill implements schema validation, artifact hash verification, and requires explicit user consent for destructive or remote operations like branch pushing and label creation.
  • [EXTERNAL_DOWNLOADS]: The skill references the pocketto-pi package via npx, which involves downloading and executing code from the npm registry at runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 03:54 AM