pocket-enterprise
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several system commands including
gh,git,node, andnpxto interact with GitHub repositories, verify authentication status, and manage local project state. - [DYNAMIC_EXECUTION]: The skill implements a lifecycle adapter registration mechanism in
.pocket/lifecycle-adapter.json. This file stores execution arguments (argv), including runtime tokens like@pocketto-node, which are expanded and executed by the core system during lifecycle events. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from GitHub, such as issue titles, labels, and pull request comments.
- Ingestion points: Data is ingested via
gh apiandgh issue listcalls to reconcile plan identities and statuses. - Boundary markers: The skill uses specific markers like
<!-- pocket-phase-<N>-summary -->and<!-- pocket-tasklist -->to delimit its own content. - Capability inventory: The skill has the ability to write to the local filesystem, push branches via Git, and execute configured adapter scripts.
- Sanitization: The skill implements schema validation, artifact hash verification, and requires explicit user consent for destructive or remote operations like branch pushing and label creation.
- [EXTERNAL_DOWNLOADS]: The skill references the
pocketto-pipackage vianpx, which involves downloading and executing code from the npm registry at runtime.
Audit Metadata