glab-orbit

SUSPICIOUS: the skill is broadly aligned with its GitLab Orbit purpose, but it has a larger trust footprint than a simple wrapper guide. Main concerns are same-org managed-binary download/exec, automatic forwarding of GitLab credentials into that binary, agent-config modification, and transitive skill installation from remote content. I do not see clear malicious or deceptive exfiltration behavior, but the scope warrants medium risk rather than benign.