glab-duo
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the GitLab Duo CLI binaries using the
glab duo cli --installcommand. This is a standard feature of the official GitLab CLI tool, which is a well-known service. - [COMMAND_EXECUTION]: The skill documents the
glab duo askandglab duo clicommands, which are used to generate and execute Git operations on the local filesystem. - [PROMPT_INJECTION]: The
glab duo askcommand presents an indirect prompt injection surface as it processes natural language to generate executable code. - Ingestion points: The
<prompt>argument inglab duo ask <prompt>(documented in SKILL.md and references/commands.md). - Boundary markers: The documentation explicitly states: "You must confirm each command before it runs."
- Capability inventory: The tool has the capability to suggest and execute any Git command via the
glabCLI. - Sanitization: The skill relies on the upstream AI assistant's safety filters and a mandatory human-in-the-loop confirmation step before execution.
Audit Metadata