pocket-help
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an informational router and help system. It does not perform any sensitive file operations, network requests, or command executions.
- [SAFE]: No evidence of prompt injection, obfuscation, or remote code execution was found in the skill instructions or reference documents.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes an ecosystem (Pocket) that processes project files and user code, this specific routing skill does not ingest untrusted data in a way that could lead to injection. It correctly instructs the agent to wait for explicit user authorization before moving between critical stages.
- [SAFE]: The referenced binary file (pocket-help.skill) is a standard ZIP archive containing the skill's own documentation files (SKILL.md and references). No hidden scripts or malicious payloads were detected within the package.
Audit Metadata