glab-config
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the
valueFromCommandsetting withincustom_headers, which allows theglabCLI to execute a specified external command to retrieve header values. This results in the execution of the command every timeglabmakes a request to the configured host (SKILL.md, references/commands.md). - [PRIVILEGE_ESCALATION]: The skill provides instructions for enabling
duo_cli_auto_runandorbit_local_auto_run. These settings suppress the interactive confirmation prompts usually required whenglabinvokes the GitLab Duo CLI or Orbit local binaries, increasing the autonomy of automated processes (SKILL.md, references/commands.md). - [CREDENTIALS_UNSAFE]: The skill details the management of sensitive credentials, including GitLab personal access tokens, OAuth client secrets, and private keys. It emphasizes security best practices, such as using environment variables (
valueFromEnv) or credential helpers instead of storing literal secrets in the YAML configuration file (SKILL.md, references/commands.md). - [COMMAND_EXECUTION]: The skill allows the configuration of global preferences for the system
editorandglab_pager, which controls which external applications are launched byglabfor editing and viewing output (SKILL.md, references/commands.md).
Audit Metadata