gitlab-cd
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides examples for downloading official tools, such as the GitLab
release-cliand standard packages liketwine(Python) andconventional-changelog-cli(Node.js). These downloads originate from well-known, trusted services (GitLab, PyPI, npmjs) and are standard for the described DevOps workflows. - [COMMAND_EXECUTION]: Includes illustrative shell commands for common deployment tasks, including operations with
kubectl,aws cli,gcloud, andssh. These commands are standard administrative operations and are presented within the context of legitimate CI/CD automation. - [CREDENTIALS_UNSAFE]: The documentation correctly identifies where sensitive tokens (e.g.,
$SSH_PRIVATE_KEY,$HEROKU_API_KEY,$PYPI_TOKEN) are required and recommends using environment variables for secure storage, which is an industry best practice. - [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected. The skill acts as a technical reference for official GitLab CD features.
Audit Metadata