Skills Explorer Add Skills

setup-matt-pocock-skills

An agent skill by mattpocock, from mattpocock/skills. Tags: catalog, configuration, setup, triage, workflow.

What it does

Configure this repo for the engineering skills: set up its issue tracker, triage label vocabulary, and domain doc layout. Run once before first use of the other engineering skills.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add mattpocock/skills --skill setup-matt-pocock-skills

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/mattpocock/skills
cp -r skills/skills/engineering/setup-matt-pocock-skills ~/.claude/skills/setup-matt-pocock-skills

Safety box score

Grade B, low risk: 21 of 100 risk points, rated 2026-10-21. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is mostly a repo setup and documentation pass, but it can also talk to GitHub/GitLab and mutate the remote tracker by creating labels. The main risks are bounded file writes in the repo and networked account changes on whatever issue tracker the repo uses.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution1 (low)It invokes shell/CLI commands such as `git remote -v`, `gh label create`, and `glab label create`, but it does not ship or evaluate arbitrary code.
Network access2 (moderate)It reaches out to GitHub/GitLab through `gh`/`glab` and can create labels on the remote tracker, so data leaves the machine.
Filesystem reach1 (low)Writes are confined to the repo, mainly `CLAUDE.md` or `AGENTS.md` and `docs/agents/*.md`, with in-place updates to an existing `## Agent skills` block.
Secrets & credentials0 (none)It does not ask for passwords, tokens, browser sessions, or key files; it only inspects repo metadata like `.git/config`.
Privilege & persistence0 (none)No sudo, global installs, services, scheduled tasks, or shell/OS settings are involved.
Instruction hijack surface0 (none)The skill tells the agent to confirm with the user and does not ask it to ignore instructions, fetch remote prompts, or hide anything.
Irreversible actions2 (moderate)It can make remote workflow changes by creating missing tracker labels after setup, which is an external state change even though the path is user-confirmed.
Transparency0 (none)All shipped files are plain Markdown/YAML; there are no binaries, decoded-at-runtime payloads, or unpinned installer commands.

Before installing

Rated 2026-10-21 by an automated review of 7 files from the skill's repository.

Source

Repository
mattpocock/skills (all skills from this repository)
Path
skills/engineering/setup-matt-pocock-skills/SKILL.md
Branch
main
Updated
2026-10-05