setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git,gh(GitHub CLI), andglab(GitLab CLI) to inspect repository configuration and manage issue labels. These are standard, well-documented tools for repository management. - [INDIRECT_PROMPT_INJECTION]: The skill ingests local repository metadata from files such as
.git/config,package.json, andpnpm-workspace.yamlto determine the project's layout (e.g., monorepo detection). It uses this data to generate configuration suggestions which are then presented to the user for confirmation before any writes occur. - [DATA_EXPOSURE]: The skill reads local configuration files to identify the repository's remote origin and current directory structure. This information is used strictly for local configuration and is not transmitted to unauthorized external services.
Audit Metadata