setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands to inspect the repository environment and determine configuration needs. It runs
git remote -vand reads the.git/configfile to identify the project's host and remote origin. - [EXTERNAL_DOWNLOADS]: The skill references and provides documentation for using official command-line interfaces from well-known services. The configuration templates for GitHub and GitLab reference the
ghandglabCLI tools, respectively. Theissue-tracker-gitlab.mdfile contains a link to the official GitLab CLI repository (https://gitlab.com/gitlab-org/cli). - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it reads and processes data from local project files. 1. Ingestion points: The skill reads
AGENTS.md,CLAUDE.md,CONTEXT.md,CONTEXT-MAP.md, andpackage.jsonto understand the repository's structure. 2. Boundary markers: The instructions do not specify any boundary markers or instructions to ignore embedded directives when reading these files. 3. Capability inventory: The agent is authorized to execute shell commands (git,gh,glab) and write files to the project directory. 4. Sanitization: There is no evidence of content sanitization or validation for the data ingested from the repository files.
Audit Metadata