glab-skills
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of curated remote skills, specifically mentioning the 'orbit' skill which is fetched from the official
gitlab-org/orbit/knowledge-graphproject on GitLab.com. These downloads are performed unauthenticated from a well-known, trusted service. - [COMMAND_EXECUTION]: The skill provides numerous examples for using the
glab skillscommand suite to interact with the local file system and manage skill files. This includes printing bundled files to stdout, installing files into project-specific (.agents/skills/) or global (~/.agents/skills/) directories, and updating those files from remote sources.
Audit Metadata