setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs standard repository scaffolding by creating or updating markdown documentation and configuration files.
- [COMMAND_EXECUTION]: The skill instructs the agent to run
git remote -vand inspect.git/configsolely to identify the repository's origin (e.g., GitHub, GitLab) for configuration purposes. This is standard repository discovery and does not involve high-privilege commands. - [EXTERNAL_DOWNLOADS]: Documentation templates reference well-known tools like the GitHub CLI (
gh) and GitLab CLI (glab). A link to the official GitLab CLI repository on GitLab's official domain is provided as a reference, which is a trusted source. - [INDIRECT_PROMPT_INJECTION]: The skill reads from and writes to repository files such as
CLAUDE.mdandAGENTS.md. While this constitutes a data ingestion surface, the risk is minimal as the actions are limited to scaffolding and are subject to user confirmation before writing.
Audit Metadata