setup-matt-pocock-skills

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary purpose is repository scaffolding and documentation setup. It performs discovery of the current repository state by reading local configuration files such as .git/config, package.json, and existing agent documentation.
  • [COMMAND_EXECUTION]: Uses standard command-line interfaces (git, gh, glab) to interact with the repository and issue trackers. These operations are limited to the legitimate scope of managing project metadata and issue tracking as described in the skill's process.
  • [DATA_EXFILTRATION]: No unauthorized data transfer or credential access was detected. Network operations are performed through official CLI tools targeting the user's configured repository remotes (e.g., GitHub or GitLab).
  • [REMOTE_CODE_EXECUTION]: The skill does not download or execute code from external sources. It relies on locally installed tools and templates provided within the skill's own package.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 12:57 AM
Security Audit — agent-trust-hub — setup-matt-pocock-skills