skills/apideck-libraries/api-skills/gitlab/Socket

gitlab

Warn

Audited by Socket on Jul 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's stated purpose matches its GitLab ticketing capabilities, and install trust is relatively normal, but the actual data flow is through Apideck's intermediary APIs and proxy rather than GitLab's official API. That third-party routing of credentials and issue data is explicitly disclosed yet still a meaningful integrity and credential-forwarding risk.

Confidence: 89%Severity: 63%

Audit Metadata

Analyzed At

Jul 1, 2026, 11:04 AM

Package URL

pkg:socket/skills-sh/apideck-libraries%2Fapi-skills%2Fgitlab%2F@99a80b68b6677e8a3a6baebb67871f85fe6f92b6333a4f136a8f5d9aac15d087