gitlab-sync

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill defines clear, defensive workflows for git branch management, including specific "never-violate" rules to ensure repository integrity and prevent accidental code leaks between environments.
  • [COMMAND_EXECUTION]: The instructions utilize standard command-line tools like git and glab (GitLab CLI) to perform operations such as fetching branches, merging code, and creating merge requests. These operations are restricted to the repository context.
  • [EXTERNAL_DOWNLOADS]: The skill references the official GitLab CLI repository (https://gitlab.com/gitlab-org/cli) for installation instructions. This is a reference to a well-known service's official resource and does not involve automated or suspicious download behaviors.
  • [DATA_EXFILTRATION]: The skill demonstrates security awareness by instructing the agent to specifically avoid leaking environment-specific configuration data (such as QA API URLs or debug flags) from build branches back into the main branch during conflict resolution.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 02:19 AM
Security Audit — agent-trust-hub — gitlab-sync