setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard development commands like
git remote -vto identify the project environment. It also provides instructions for using official CLI tools such asgh(GitHub) andglab(GitLab) for issue management.- [DATA_EXPOSURE]: The skill accesses non-sensitive project files, includingAGENTS.md,CONTEXT.md, and project directory structures, to understand the documentation and issue-tracking setup. No access to sensitive credentials, SSH keys, or environment variables was detected.- [EXTERNAL_DOWNLOADS]: The skill includes a reference to the official GitLab CLI repository (gitlab.com/gitlab-org/cli). This is a well-known and trusted service, and the reference is for documentation purposes rather than automated execution.- [PROMPT_INJECTION]: The skill processes repository metadata to generate configuration files, which represents a surface for indirect prompt injection. However, the skill mitigates this risk by requiring the agent to present findings and obtain explicit user confirmation before writing any files to the repository.
Audit Metadata