gitlab-pipeline-watch
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/pipeline-watch.pyexecutes theglabCLI tool viasubprocess.runto interact with the GitLab API. - Evidence: The function
glab_apiinscripts/pipeline-watch.pycallssubprocess.run(["glab", "api", path], ...). - Risk Evaluation: This is a legitimate and expected use of the
glabCLI for a GitLab-focused development tool. The arguments passed to the CLI are constructed using user-provided project names and MR IDs, which are sanitized via URL encoding and integer casting before being passed to theglabcommand, mitigating command injection risks.
Audit Metadata