glab-job
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill recognizes the risk of indirect prompt injection from untrusted GitLab content (job logs, commit messages). It includes proactive security warnings in
SKILL.mdand explicit boundary markers inscripts/ci-debug.shto instruct the agent to treat fetched content as data only and ignore embedded instructions. - [COMMAND_EXECUTION]: The skill executes
glabCLI commands and a local bash script (scripts/ci-debug.sh) to view, retry, and debug jobs. These operations are limited to the intended scope of CI/CD job management.
Audit Metadata