gitlab-pipeline-watch

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/pipeline-watch.py executes the glab CLI tool via subprocess.run to interact with the GitLab API.
  • Evidence: The function glab_api in scripts/pipeline-watch.py calls subprocess.run(["glab", "api", path], ...).
  • Risk Evaluation: This is a legitimate and expected use of the glab CLI for a GitLab-focused development tool. The arguments passed to the CLI are constructed using user-provided project names and MR IDs, which are sanitized via URL encoding and integer casting before being passed to the glab command, mitigating command injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 05:37 PM
Security Audit — agent-trust-hub — gitlab-pipeline-watch