gitlab-api-core
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses safe placeholders for sensitive information, such as
glpat-xxxxxxxxxxxx,APP_ID, andoauth-token-here, following best practices for documentation and credential management. - [EXTERNAL_DOWNLOADS]: The skill references the
python-gitlablibrary and therequestslibrary. These are well-known, standard tools for interacting with APIs and do not pose a security risk in this context. - [COMMAND_EXECUTION]: The skill includes shell command examples using
curlandgit clone. These are standard instructional snippets for API testing and repository access. - [SAFE]: The skill documents the use of the
~/.python-gitlab.cfgconfiguration file, which is the standard, secure way to manage GitLab credentials for the python-gitlab library. - [SAFE]: Data Ingestion Surface (Category 8). The skill provides patterns for fetching external data from GitLab endpoints.
- Ingestion points: API responses from projects, groups, and users.
- Boundary markers: None present in the provided snippets.
- Capability inventory: The skill demonstrates capabilities for network requests (GET/POST/PUT/DELETE) and repository operations (clone/push).
- Sanitization: No specific sanitization or escaping logic is included in the basic usage examples.
Audit Metadata