setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git remote -vfor repository discovery and defines standard interaction patterns for official CLI tools such asgh(GitHub) andglab(GitLab) to manage issues and pull requests. - [INDIRECT_PROMPT_INJECTION]: The skill reads local repository configuration and documentation files to assess project state and provide tailored configuration recommendations.
- Ingestion points: Analyzes project-specific files including
package.json,.git/config,CLAUDE.md, andCONTEXT.mdto identify the repository context and existing documentation. - Boundary markers: Incorporates clear interactive steps to present discovery findings to the user and request approval before performing any file edits.
- Capability inventory: Employs file system read/write operations and shell command execution for repository metadata retrieval and documentation updates.
- Sanitization: Relies on a human-in-the-loop workflow where the agent must confirm proposed changes with the user during the process.
- [EXTERNAL_DOWNLOADS]: The skill references the official GitLab CLI repository, which is a well-known development service resource and categorized as a safe source.
Audit Metadata