glab-repo
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents and uses the
glabCLI tool for GitLab repository management. These are standard development operations like cloning, forking, and member management.\n - Evidence:
glab repo clone,glab repo fork,glab repo members add, etc.\n- [REMOTE_CODE_EXECUTION]: The skill includes a local bash script (scripts/sync-fork.sh) to automate syncing a fork with its upstream repository. This script performs standard git operations (fetch, merge, push) on the local machine.\n - Evidence:
scripts/sync-fork.shin the file list and usage examples inSKILL.md.\n- [DATA_EXPOSURE]: The skill mentions using personal access tokens for authentication with private repositories, but correctly instructs users to manage these through establishedglabauthentication mechanisms or secure URLs rather than hardcoding them.\n - Evidence:
glab repo mirrorexamples mention embedding credentials in URLs, which is a standard but sensitive GitLab feature documented for pull mirrors.
Audit Metadata