gitlab-ci-docs
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation guide, providing a curated list of links to official GitLab documentation at
docs.gitlab.com. All external links are to the official vendor domain. - [SAFE]: The instructions include security recommendations for GitLab CI/CD users, specifically advising the use of secrets management and external secrets (e.g., HashiCorp Vault) rather than storing credentials in plain environment variables.
- [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface as it processes user questions about CI/CD workflows. However, it lacks any high-risk capabilities such as file system writing, network requests to untrusted domains, or shell command execution, effectively neutralizing the risk of indirect injection.
- [NO_CODE]: The skill consists entirely of markdown instructions and documentation references; it does not include scripts, executables, or dependency manifests.
Audit Metadata