gitlab
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard wrapper for the official GitLab command-line interface tool. All commands provided are legitimate operations for managing GitLab projects.
- [EXTERNAL_DOWNLOADS]: Installation instructions utilize official and well-known system package managers such as Homebrew (brew), APT (apt), and Scoop (scoop) to install the legitimate 'glab' binary. These are trusted sources for tool distribution.
- [CREDENTIALS_UNSAFE]: Authentication is handled using the tool's built-in OAuth process via 'glab auth login'. No hardcoded secrets, API keys, or unsafe credential management practices are present.
- [COMMAND_EXECUTION]: The skill executes predefined GitLab commands which align with its stated purpose of project management. There is no evidence of arbitrary command injection or suspicious subprocess spawning.
Audit Metadata