skills/vince-winkintel/gitlab-cli-skills/glab-skills/Socket

glab-skills

Warn

Audited by Socket on Oct 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: mostly coherent GitLab-owned skill-management documentation with official same-org sources, but it instructs transitive installation of another skill and fetches mutable remote skill content from a default branch. No clear credential theft, covert behavior, or malicious data routing is present, but the remote-skill trust chain and unpinned updates make it medium risk.

Confidence: 90%Severity: 56%

Audit Metadata

Analyzed At

Oct 20, 2026, 10:17 PM

Package URL

pkg:socket/skills-sh/vince-winkintel%2Fgitlab-cli-skills%2Fglab-skills%2F@126f25710eed4bdaa21da58cb658b38c4001071addee2fd484dbe1e92a065a92