glab-artifact-registry
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the official
glabCLI to interact with GitLab Enterprise Edition services. All credential management follows best practices by requesting short-lived, ephemeral tokens rather than permanent keys. - [SAFE]: Command execution is limited to the
glabutility for authenticating against defined GitLab instances and configuring local development environments (Docker, Maven, Gradle, npm, sbt). - [SAFE]: Data access is restricted to standard local configuration paths (~/.docker/config.json, ~/.m2/settings.xml, ~/.gradle/gradle.properties, ~/.npmrc, and ~/.sbt/1.0/credentials.sbt) for the purpose of writing authentication metadata as intended by the skill's primary function.
- [SAFE]: The skill contains explicit warnings against printing tokens in logs, storing them in repositories, or including them in command-line arguments, demonstrating a strong security posture regarding credential handling.
Audit Metadata