Analyzed Aug 20, 2026
The skill facilitates code reviews by running git commands and sub-agents but faces risks from command injection via user-supplied git references and indirect prompt injection through unsanitized repository data.
mattpocock/skills
Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes: Standards (does the code follow this repo's documented coding…
npx skills add https://github.com/mattpocock/skills
Audit results are mixed — compare nearby options before installing.
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybr…
568.2K installsUse this skill any time a .pptx or .potx file is involved in any way — as input, output, or bot…
216.8K installsUse this skill whenever the user wants to do anything with PDF files. This includes reading or …
192.4K installsUse this skill whenever the user wants to create, read, edit, or manipulate Word documents (.do…
184.5K installsUse this skill any time a spreadsheet file is the primary input or output. This means any task …
165K installsPartner security reviews for this skill.
Analyzed Aug 20, 2026
The skill facilitates code reviews by running git commands and sub-agents but faces risks from command injection via user-supplied git references and indirect prompt injection through unsanitized repository data.
Analyzed Aug 20, 2026
[HIGH] W007: Insecure credential handling detected in skill instructions.
Analyzed Aug 20, 2026
0 alerts
Other skills from mattpocock/skills · top by installs.
npx skills add https://github.com/mattpocock/skills
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
main
Tutorials, guides, and showcases specifically about this skill.