gitlab-cd

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides examples for downloading official tools, such as the GitLab release-cli and standard packages like twine (Python) and conventional-changelog-cli (Node.js). These downloads originate from well-known, trusted services (GitLab, PyPI, npmjs) and are standard for the described DevOps workflows.
  • [COMMAND_EXECUTION]: Includes illustrative shell commands for common deployment tasks, including operations with kubectl, aws cli, gcloud, and ssh. These commands are standard administrative operations and are presented within the context of legitimate CI/CD automation.
  • [CREDENTIALS_UNSAFE]: The documentation correctly identifies where sensitive tokens (e.g., $SSH_PRIVATE_KEY, $HEROKU_API_KEY, $PYPI_TOKEN) are required and recommends using environment variables for secure storage, which is an industry best practice.
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected. The skill acts as a technical reference for official GitLab CD features.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 04:18 PM
Security Audit — agent-trust-hub — gitlab-cd