setup-matt-pocock-skills

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard development commands like git remote -v to identify the project environment. It also provides instructions for using official CLI tools such as gh (GitHub) and glab (GitLab) for issue management.- [DATA_EXPOSURE]: The skill accesses non-sensitive project files, including AGENTS.md, CONTEXT.md, and project directory structures, to understand the documentation and issue-tracking setup. No access to sensitive credentials, SSH keys, or environment variables was detected.- [EXTERNAL_DOWNLOADS]: The skill includes a reference to the official GitLab CLI repository (gitlab.com/gitlab-org/cli). This is a well-known and trusted service, and the reference is for documentation purposes rather than automated execution.- [PROMPT_INJECTION]: The skill processes repository metadata to generate configuration files, which represents a surface for indirect prompt injection. However, the skill mitigates this risk by requiring the agent to present findings and obtain explicit user confirmation before writing any files to the repository.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 03:01 AM
Security Audit — agent-trust-hub — setup-matt-pocock-skills