gitlab-mr-issue

Pass

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the official glab (GitLab CLI) and git commands for managing issues and merge requests. These are standard development tools and the usage described matches the skill's stated purpose of automating GitLab workflows.
  • [DATA_EXPOSURE_&_EXFILTRATION]: No sensitive file access or unauthorized network operations were detected. The skill uses glab auth status and glab api /user to verify the user's identity within the GitLab environment, which is standard procedure for CLI-based API interactions.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data (Merge Request descriptions, Issue comments, and diffs) using glab issue view and glab mr view. However, these are low-risk operations as the data is primarily used for display or as context for the user. The skill includes instructions to read current content before modifying it, which helps maintain context and reduces the risk of unintended modifications.
  • [REMOTE_CODE_EXECUTION]: No patterns of remote code execution or installation of untrusted third-party dependencies were found. All commands rely on local installations of glab, git, and jq.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 11, 2026, 11:51 PM