gitlab-ci-generator

SUSPICIOUS. The core behavior fits a GitLab CI generator, and external calls go to official GitLab endpoints, but the skill introduces a transitive trust dependency on another skill/local validator with unverifiable provenance from the provided text and routes external lookup through Context7 before official docs. No signs of outright malware, credential theft, hidden execution, or off-purpose exfiltration were found.

This is a deployment automation template, not evident malware. It intentionally performs privileged and potentially destructive Kubernetes operations, but those operations are consistent with its stated purpose. The main concerns are accidental multi-method deployment, insufficient input quoting and validation, credential exposure through the Docker CLI, mutable CI image dependencies, possible privileged Docker-in-Docker execution, and potential secret handling in repository manifests. Review and harden these areas before production use.