glab-mr
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
glabandgitcommand-line tools to fetch merge request details, checkout branches, and generate diffs. This is the primary function of the skill and uses standard, well-known development tools.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data in the form of code changes from GitLab Merge Requests. \n - Ingestion points: Files and metadata are retrieved via
glab mr show,glab mr diff, and theviewtool. \n - Boundary markers: None explicitly defined in the instructions to separate code from instructions. \n
- Capability inventory: The skill has the ability to execute shell commands (
glab,git) and read local files. \n - Sanitization: There is no mention of sanitizing or escaping the content of the merge request before it is processed by the agent.
Audit Metadata