gitlab
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by instructing users to store credentials in environment variables (
process.env.APIDECK_API_KEY) rather than hardcoding them. - [EXTERNAL_DOWNLOADS]: The skill references the vendor's own package
@apideck/unifyand official documentation from GitLab and Apideck. All identified URLs point to legitimate, well-known, or vendor-controlled domains (apideck.com, gitlab.com, specs.apideck.com). - [COMMAND_EXECUTION]: Code examples use standard API calls through the vendor SDK and a
curlexample for the Proxy API, all targeting the vendor's authorized infrastructure (unify.apideck.com). - [DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were detected. The skill's primary purpose is data synchronization between the user's agent and GitLab via the Apideck gateway.
Audit Metadata