glab-snippet
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
glabcommand-line utility to interact with GitLab. This is the intended and primary functionality of the skill for sharing code snippets. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data which could potentially contain malicious instructions.
- Ingestion points: Reads from local files and standard input in
SKILL.md. - Boundary markers: No specific delimiters or warnings to the model regarding embedded instructions are present.
- Capability inventory: Executes shell commands via the
glabCLI and sends data to GitLab APIs. - Sanitization: No explicit sanitization or validation of the file content is performed before upload.
Audit Metadata