glab-duo
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the acquisition and installation of the GitLab Duo CLI executable using the
glab duo cli --installandglab duo cli updatecommands. These operations can be configured to run non-interactively using the--yesflag or through global configuration settings likeduo_cli_auto_download. - [COMMAND_EXECUTION]: The skill executes the
glabCLI to interface with the GitLab Duo Agent Platform. This includes the ability to perform autonomous actions on a codebase via therun --goalsubcommand, which takes natural language instructions to modify code or fix tests. - [INDIRECT_PROMPT_INJECTION]: The skill implements a workflow where an AI agent processes codebase data and user-defined goals, creating a vulnerability surface for indirect injection.
- Ingestion points: Data is ingested from the local project working tree and user input via the
--goalparameter as documented inSKILL.mdandreferences/commands.md. - Boundary markers: The skill does not specify the use of delimiters or specific instructions to ignore embedded commands within the files being processed.
- Capability inventory: The
glabtool has permissions to read repository content and interact with authenticated GitLab service endpoints. - Sanitization: No explicit sanitization or filtering is performed on the codebase data, though the skill provides best-practice guidance such as using isolated working trees and performing independent reviews of agent-generated changes.
Audit Metadata