glab-gpg-key
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the
glabCLI tool for managing GPG keys on GitLab. All commands (glab gpg-key add,delete,get,list) are standard administrative tasks consistent with the skill's stated purpose. - [DATA_EXPOSURE]: The documentation includes an example of uploading a public GPG key from a local file path (
~/.gnupg/pubkey.asc). This is a common and legitimate operation for setting up commit signing and does not involve unauthorized access to private keys or sensitive credentials. - [SAFE]: No prompt injection, remote code execution, obfuscation, or persistence mechanisms were detected. The skill uses well-known command-line tools in a transparent and documented manner.
Audit Metadata