glab-security
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional, providing guidance on how to use the standard
glabCLI tool for GitLab security configurations. It does not include any scripts, executable files, or remote dependencies. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and act upon data from GitLab project security settings. This represents a standard administrative workflow with minimal risk of injection from the structured CLI output.
- Ingestion points: Command output from
glab security config status(SKILL.md). - Boundary markers: Not applicable as the skill provides high-level guidance rather than a strict template.
- Capability inventory: Execution of
glabCLI commands for project configuration (SKILL.md). - Sanitization: Relies on the underlying
glabtool's handling of project data.
Audit Metadata