setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard, benign shell commands such as
git remote -vto identify the repository's origin and context. This is standard behavior for development-oriented setup tools. - [EXTERNAL_DOWNLOADS]: The skill references well-known command-line utilities such as the GitHub CLI (
gh) and GitLab CLI (glab). These references are informative and point to official sources from trusted organizations. - [DATA_EXFILTRATION]: Analysis shows no evidence of data exfiltration. While the skill reads local configuration files like
.git/configandCLAUDE.md, it uses this information solely to suggest configuration defaults to the user within the local environment. - [PROMPT_INJECTION]: No prompt injection patterns, such as instructions to ignore safety guidelines or override system prompts, were found in the skill's instructions.
- [CREDENTIALS_UNSAFE]: The skill does not attempt to access sensitive credential files (e.g., SSH keys, AWS credentials) or hardcode any API tokens.
Audit Metadata