setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a prompt-driven workflow that requires explicit user confirmation before any configuration files are written or modified.
- [COMMAND_EXECUTION]: The skill provides usage conventions for standard developer tools, specifically the GitHub CLI (
gh) and GitLab CLI (glab), to facilitate issue management in future tasks. - [PROMPT_INJECTION]: The skill reads and processes local repository configuration and documentation files, which constitutes a surface for indirect prompt injection.
- Ingestion points: The skill reads
.git/config,AGENTS.md,CLAUDE.md,CONTEXT.md, and architectural decision records (ADRs) to determine the repository state. - Boundary markers: No explicit delimiters are used to separate untrusted repository content from instructions.
- Capability inventory: The skill has permissions to write to the repository's documentation directory (
docs/agents/) and instructs the agent on using shell commands viaghorglabCLI tools. - Sanitization: No validation or filtering is performed on the content of the read files.
Audit Metadata