gitlab-api-core

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses safe placeholders for sensitive information, such as glpat-xxxxxxxxxxxx, APP_ID, and oauth-token-here, following best practices for documentation and credential management.
  • [EXTERNAL_DOWNLOADS]: The skill references the python-gitlab library and the requests library. These are well-known, standard tools for interacting with APIs and do not pose a security risk in this context.
  • [COMMAND_EXECUTION]: The skill includes shell command examples using curl and git clone. These are standard instructional snippets for API testing and repository access.
  • [SAFE]: The skill documents the use of the ~/.python-gitlab.cfg configuration file, which is the standard, secure way to manage GitLab credentials for the python-gitlab library.
  • [SAFE]: Data Ingestion Surface (Category 8). The skill provides patterns for fetching external data from GitLab endpoints.
  • Ingestion points: API responses from projects, groups, and users.
  • Boundary markers: None present in the provided snippets.
  • Capability inventory: The skill demonstrates capabilities for network requests (GET/POST/PUT/DELETE) and repository operations (clone/push).
  • Sanitization: No specific sanitization or escaping logic is included in the basic usage examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 06:52 PM